About Prime Dev Force Security
Prime Dev Force Security is a website security service from Prime Dev Force. It shows site owners what their website, DNS and email setup reveal from the outside, explains why each finding matters, and helps them fix it in the right order.
Who it's for
People responsible for a website who aren't full-time security specialists: small-business owners, agencies and freelancers, and developers who want a quick, honest second look at a configuration. It works for any website. The server agent supports WordPress, Joomla and Drupal, and other PHP sites at a lower level of confidence.
What it does
- A free external check of HTTPS and redirects, TLS certificates, security headers, DNS and email authentication, with evidence and a prioritized fix list.
- A free monitoring beta for one domain you've verified: scheduled checks, history, alerts, malware indicators and weekly subdomain and page checks.
- A server agent that checks files (and, on WordPress, the database) on your own server, and applies cleanup only when you approve it.
The rules it follows
- Every finding shows its evidence. You see the header, record, certificate or file that triggered it, not just a verdict.
- A check that can't run is never a pass. It's reported as "could not complete" or "not tested", and it lowers coverage instead of being counted as fine.
- No overclaiming. We don't call a site "secure", "protected" or "compliant". A clean result means our checks found nothing, which is a narrower statement.
- A published, deterministic score. The model is public, and any change to it gets a new version number.
- Only domains you're allowed to check. Malware-style checks and subdomain discovery run only for verified owners.
- Nothing changes on your server without your approval. The agent never uploads whole files, every change is backed up first, and every change can be undone.
What it isn't
It isn't a firewall, a penetration test, a PCI scan or a malware-removal service, and it doesn't offer real-time protection. For protection at the edge, the dashboard can review the settings in your own Cloudflare account. What we check lists every check and its limits.
How it runs
The service runs on Cloudflare's network. Checks come from Cloudflare's infrastructure with an identifying user agent, described on About our scanner. How data is handled is described in the privacy notice, and how to report a security issue is on Security and disclosure.