# PatchPings

> AI-powered website monitoring & audits

## Product

- https://patchpings.com/: Homepage — AI-powered website security scanning and uptime monitoring for Android
- https://patchpings.com/features: Security scanning, AI fixes, uptime monitoring, SSL and domain expiry alerts
- https://patchpings.com/monitoring: Always-on uptime monitoring with SSL, domain and blacklist alerts
- https://patchpings.com/scans: Four scan types — security headers, SSL/TLS, DNS health, HTTP redirects
- https://patchpings.com/dmarc-checker: Free DMARC checker — verify DMARC, SPF and DKIM via a PatchPings security scan
- https://patchpings.com/ssl-certificate-checker: Free SSL certificate checker — validity, expiry, chain and TLS strength
- https://patchpings.com/how-it-works: Enter a URL, scan in parallel, get copy-paste fixes in under a minute
- https://patchpings.com/pricing: Free $0 (1 site, 5 audits/mo); Solo $29/mo or $290/yr; Agency $69/mo or $690/yr
- https://patchpings.com/download: Download PatchPings free on Google Play (Android)
- https://patchpings.com/faq: Answers about scanning, monitoring, plans, alerts and privacy
- https://patchpings.com/about: Built by CodenVibe IT LLC — mobile-first security scanning and monitoring

## Knowledge base

- https://patchpings.com/knowledge-base: Guides on web security, scans, monitoring and AI
- https://patchpings.com/knowledge-base/what-are-http-security-headers: HTTP security headers are the cheapest, fastest win in web security. Learn what each one does, which to set first, and how to reach an A grade.
- https://patchpings.com/knowledge-base/ssl-tls-aplus-certificate-grade: The padlock is only the beginning. Understand certificates, TLS versions, and the chain of trust — concepts first, before you chase a grade.
- https://patchpings.com/knowledge-base/xss-clickjacking-csrf-explained: What clickjacking is, how XSS and CSRF work, and the concrete defences that shut each one down — without the jargon.
- https://patchpings.com/knowledge-base/how-to-read-your-security-scan-report: Grades, scores and findings can be overwhelming. Here is how to interpret a security scan and decide what to fix first.
- https://patchpings.com/knowledge-base/spf-dkim-dmarc-email-authentication-guide: What DMARC is, how SPF and DKIM support it, and the concepts behind email trust — before you publish a step-by-step DMARC policy.
- https://patchpings.com/knowledge-base/http-to-https-redirects-mixed-content: Serving HTTPS is not enough if visitors can still reach the insecure version. Learn to fix redirects, chains and mixed content the right way.
- https://patchpings.com/knowledge-base/website-uptime-monitoring-guide: What uptime monitoring really measures, how often to check, and how to be the first to know about downtime instead of the last.
- https://patchpings.com/knowledge-base/ssl-certificate-expiry-monitoring: SSL certificate monitoring catches expiry before visitors do. Here is why careful teams still get burned and how to make it impossible.
- https://patchpings.com/knowledge-base/reducing-false-alerts-multi-region-monitoring: Alert fatigue is the silent killer of monitoring. Learn how checking from multiple regions turns noisy alerts into ones you can trust.
- https://patchpings.com/knowledge-base/how-ai-is-changing-website-security-scanning: Traditional scanners hand you raw data. AI-powered scanning reads it, ranks it by real-world risk and tells you what to do in plain English.
- https://patchpings.com/knowledge-base/ai-anomaly-detection-uptime-monitoring: Static thresholds cannot tell a real outage from ordinary variation. Here is how AI may help flag unusual patterns and alert when it matters.
- https://patchpings.com/knowledge-base/how-ai-writes-your-security-fixes: Knowing what is wrong is only half the battle. See how an AI Fix Assistant turns each finding into a copy-paste-ready solution for your exact stack.
- https://patchpings.com/knowledge-base/content-security-policy-setup-guide: A content security policy (CSP) tells browsers what your pages may load. Deploy it safely: inventory, report-only, refine, then enforce.
- https://patchpings.com/knowledge-base/setting-up-hsts-the-right-way: What HSTS is, why it matters, and how to enable it safely with a short max-age ramp — not the misconfiguration rescue playbook.
- https://patchpings.com/knowledge-base/how-to-fix-content-security-policy-errors: Troubleshoot CSP console errors and violation reports after deploy — the fix playbook once a policy is already in place.
- https://patchpings.com/knowledge-base/dmarc-setup-step-by-step: Publish DMARC from p=none to p=reject: DNS record, report inbox, and policy upgrades — the hands-on walkthrough after the concepts guide.
- https://patchpings.com/knowledge-base/how-to-get-ssl-grade-a-plus: An actionable checklist for TLS 1.3, strong ciphers, complete chains and HSTS — the concrete steps between a passing grade and A+.
- https://patchpings.com/knowledge-base/website-downtime-checklist: When your site goes dark, minutes matter. Follow this ordered checklist to find the cause fast: DNS, hosting, SSL, CDN and application layers.
- https://patchpings.com/knowledge-base/hsts-misconfiguration-fixes: Diagnose and recover from HSTS lockouts, broken subdomains, and preload mistakes — troubleshooting after a bad rollout.
- https://patchpings.com/knowledge-base/what-is-llms-txt: llms.txt is a plain-text file at your site root that tells AI systems which pages to prefer for accurate answers. Learn the format, how it differs from robots.txt, and how to publish one.
- https://patchpings.com/knowledge-base/what-is-answer-engine-optimization: Answer engine optimization helps AI assistants and answer boxes cite your pages accurately. Learn how AEO differs from classic SEO and which on-site signals matter most.
- https://patchpings.com/knowledge-base/spf-record-guide: Sender Policy Framework (SPF) lists which servers may send mail for your domain. Learn how to write an SPF TXT record, stay under ten DNS lookups, and pair it with DKIM and DMARC.
- https://patchpings.com/knowledge-base/what-is-security-txt: security.txt is a well-known file that tells researchers how to report vulnerabilities on your domain. Learn the RFC 9116 fields, where to host it, and what to include.
- https://patchpings.com/knowledge-base/x-frame-options-header: X-Frame-Options tells browsers whether your pages may be embedded in frames. Learn DENY vs SAMEORIGIN, how it relates to CSP frame-ancestors, and how to verify the header.
- https://patchpings.com/knowledge-base/dmarc-policy-explained: DMARC p=none, p=quarantine, and p=reject tell receivers what to do when authentication fails. Learn what each policy means and when to move between them.
- https://patchpings.com/knowledge-base/dkim-record-guide: DomainKeys Identified Mail (DKIM) signs outbound messages so receivers can verify integrity. Learn how selectors, public keys, and DMARC alignment fit together.
- https://patchpings.com/knowledge-base/cross-origin-opener-policy: Cross-Origin-Opener-Policy isolates your browsing context from cross-origin popups. Learn same-origin vs same-origin-allow-popups and when COOP helps.
- https://patchpings.com/knowledge-base/referrer-policy-header: Referrer-Policy controls how much of the current URL is sent in the Referer header on navigations and requests. Learn practical values and privacy trade-offs.
- https://patchpings.com/knowledge-base/security-headers-check: Learn practical ways to inspect HTTP security headers: browser DevTools, command-line fetches, and automated scanners that grade missing or weak policies.
- https://patchpings.com/knowledge-base/how-to-read-dmarc-reports: DMARC aggregate reports show who sent mail as your domain and whether SPF and DKIM passed. Learn how to read the XML, spot unknown senders, and decide when to tighten policy.
- https://patchpings.com/knowledge-base/what-is-ai-txt: ai.txt is a machine-readable file that shares AI crawler preferences and citation guidance. Learn how it differs from llms.txt and robots.txt, and how PatchPings publishes ai.txt.
- https://patchpings.com/knowledge-base/x-content-type-options-header: X-Content-Type-Options: nosniff stops browsers from MIME-sniffing responses into executable types. Learn why the header matters and how to verify it.
- https://patchpings.com/knowledge-base/permissions-policy-header: Permissions-Policy lets you disable camera, microphone, geolocation, and other powerful browser features your site does not need. Learn a safe baseline and how to extend it.
- https://patchpings.com/knowledge-base/csp-nonce-guide: Content-Security-Policy nonces let you allow specific inline scripts without opening unsafe-inline. Learn how nonces work, how they differ from hashes, and rollout tips.

## Legal

- https://patchpings.com/privacy-policy
- https://patchpings.com/extension-privacy
- https://patchpings.com/cookie-policy
- https://patchpings.com/terms-of-services
- https://patchpings.com/acceptable-use
- https://patchpings.com/account-deletion