QuillHatch pricing
Practical security clarity for small businesses.
For eligible businesses across the United States, start with a focused free scan. Choose a one-time report for practical interpretation, or keep a monthly watch on the changes that matter.
The free scan is a useful first signal
It reads public records, checks HTTPS and certificate health, and fingerprints visible WordPress signals. It gives a small team a clear place to start, not a complete security audit.
Paid options
Choose a useful answer—or keep watching.
The reports use the same six public signals at different depths: the $49 limited/basic report is concise, while the $99 standard full report adds expanded context and a prioritized action plan. Monitoring adds monthly rechecks and email alerts for teams that want ongoing visibility.
- Six public checks across email, HTTPS, SSL, and WordPress exposure
- Concise plain-English findings with the first priority called out
- Useful for deciding what deserves attention next
One-time purchase. Limited scope, no recurring charge.
- Everything in the limited/basic report
- Expanded context for each finding and why it matters
- Prioritized remediation plan with provider-specific next steps
One-time purchase. Expanded interpretation and remediation guidance.
- Monthly rechecks across all six public coverage areas
- Email alerts when a monitored signal changes
- A standard full report baseline to make changes easier to understand
- Future phishing campaigns are not included and will be priced separately
Billed monthly. Cancel future months through the hosted billing process.
The six-check boundary
Focused evidence, not a mystery score.
QuillHatch checks the public-facing signals most relevant to email impersonation and common web exposure for small businesses across the United States.
What you get
Readable guidance, then a way to stay oriented.
- A plain-English explanation of what we found
- A clear distinction between urgent gaps and lower-risk signals
- Practical next steps without a technical report dump
- A standard full report to establish your baseline
- Monthly rechecks of SPF, DKIM, DMARC, HTTPS, SSL, and WordPress exposure
- Email alerts when a monitored signal changes
- Future phishing campaigns are not included and will be priced separately
Compare plans
All paid options stay within the same six public checks. The $49 report is intentionally concise; the $99 report adds depth; monitoring keeps the baseline current.
| Features | Limited/basic security report | Standard full security report | Monthly monitoring |
|---|---|---|---|
| Included | |||
| Six public checks: SPF, DKIM, DMARC, HTTPS, SSL, WordPress | Included | Included | Included |
| Concise findings and first priority | Included | Included | Included |
| Expanded interpretation and remediation plan | Not included | Included | Included |
| Monthly rechecks and email change alerts | Not included | Not included | Included |
| Not included; future campaigns priced separately | Not included; future campaigns priced separately | Not included; future campaigns priced separately | Not included; future campaigns priced separately |
| Best for | |||
| A limited, affordable first answer | Included | Not included | Not included |
| A full one-time action plan | Not included | Included | Not included |
| Ongoing awareness of changes | Not included | Not included | Included |
Know what this page does not promise.
- This is not a complete security audit, penetration test, or vulnerability assessment.
- QuillHatch uses public evidence and HTTPS checks; it never needs or receives your passwords.
- Custom DKIM selectors may require the documentation from your email provider.
- The check does not guarantee protection or replace a qualified security review.
Phishing simulations are still coming soon. They are not sold, included in monitoring, or bundled into either report; future campaigns will be priced separately.