I built a free website security scanner because most small websites never get audited