Guyanese developers
Review the websites and web apps you build. Use severity, evidence, and recommended fixes to decide what to address next.
Built for Guyana’s digital community
Website and web app security scanning for Guyana.
Lugescan helps developers, business owners, and government teams review their websites and web apps for security issues—with findings explained clearly and fixes organised by priority.
Create a workspaceFrom domain to fix list in three steps.
- 01
Verify your domain
Publish a DNS TXT record to scan on your own schedule—the recommended option—or confirm a code sent to a mailbox like admin@ or postmaster@ to approve one scan. Scans only run on domains you have verified.
- 02
Configure a scan
Pick a preset or build your own: open ports, weak TLS, missing headers, loose cookies, exposed paths, injection points, leaked API keys, known CVEs, and more.
- 03
Review and fix
Open the report. Each finding carries a severity, the evidence behind it, and a recommended fix.
Every report is built the same way.
Six sections, in the same order each time, so a report is easy to read, share with your developer, and compare with the last one.
- 01
Executive summary
The outcome in plain language, for whoever needs the short version.
- 02
At a glance
Findings counted by severity, from critical to informational.
- 03
Target overview
What the scan observed: stack, versions, ports, headers, cookies. Facts only, no severity.
- 04
Scope and limitations
What was checked, and what the scan could not see.
- 05
Findings
Each issue with its severity, the evidence behind it, and how to fix it.
- 06
Recommended next steps
What to do first, in priority order.
Made for the people who run Guyana’s websites and web apps.
Business owners
Understand security findings on your business website or web app. Share a clear report with your developer and track scans in one workspace.
Government agencies
Give your technical team a shared place to review agency websites and web apps, prioritise findings, and retain scan reports.
Go further with Lugetech.
Scan domains you own and verify. Automated findings support your security review; they do not certify compliance or replace a full security assessment.
Need a full security assessment? Contact Lugetech, the company behind Lugescan, to discuss a deeper review of your systems.
Talk to Lugetech at lugetech.comEvery Lugescan report includes a Scope and limitations section so you know what was covered and where further assessment may be needed.
Common questions about Lugescan.
What is Lugescan?
Lugescan is a website security scanning service built for Guyana’s digital community. It helps developers, business owners, and government teams review their websites and web apps for security issues. Findings are explained clearly, and recommended fixes are organised by priority, so you know what to address first.
How does Lugescan verify that I own a domain?
DNS is the recommended method: it proves you control the domain and lets you scan on your own schedule. You can also confirm a code sent to a standard domain mailbox such as admin@ or postmaster@. That approves one scan, and the scan needs to start within 1 hour of confirming the code. Scans only run on domains you have verified. DNS verification proves you control the target, but it does not replace a written scope agreement, so keep the DNS record in place while the domain is active.
What does a Lugescan report include?
Every report has six sections in the same order: Executive summary, At a glance, Target overview, Scope and limitations, Findings, and Recommended next steps. Each finding carries a severity, the evidence behind it, and how to fix it. At a glance counts findings by severity, from critical to informational.
Who is Lugescan for?
Lugescan is made for the people who run Guyana’s websites and web apps: Guyanese developers reviewing what they build, business owners who want to understand findings on their business website or web app, and government agencies whose technical teams need a shared place to review websites, prioritise findings, and retain scan reports.
What can I scan with Lugescan?
Only domains you own and have verified. You can pick a preset or choose individual checks, from security headers and TLS to ports and cookies. Scan only what you are authorized to test: automated findings support your security review, but they do not certify compliance or replace a full security assessment.
Can I run more than one scan at a time?
No. A workspace can have one scan queued or running at a time. While a scan is active, starting another one, even for a different target or from another tab, is blocked until the first scan finishes or is canceled. After a scan completes, fails, or is canceled, a short cooldown must pass before the next scan can start.
How many scans do I get on the free plan?
The free plan includes 10 scan units each month, and a quick scan costs one unit, so that is up to 10 quick scans. The free plan also allows one scan start per rolling 24 hours. Larger presets cost more units: a web app, network, or WordPress scan costs two, and a full, OWASP, or custom scan with 10 or more checks costs five.
Are my scan reports stored securely?
Reports are encrypted at rest and scoped to the workspace that ran the scan, so only the active members of the workspace that ran the scan can open them. Target domains are encrypted too. Each report keeps a snapshot of its target, so it stays readable after the target changes.