DebugTeam is a free service for limited observation of public website information. The operator is Jochen Schultz, Buchenweg 13, 53347 Alfter. Contact: info@debugteam.com.
Requirements
Only register websites whose monitoring you are authorized to arrange. Use your own email address and only webhook destinations you are authorized to configure. Circumventing quantity limits, abusive registrations and attempts to contact internal services are prohibited.
Scope
DebugTeam offers a free service for up to ten websites per email address. It is designed to perform HTTP/TLS checks roughly daily at varying times and compare detectable WordPress components with available security advisories. Data source availability and inventory age affect the result.
Software inventory and research notices
You can additionally record up to 500 private inventory entries for applications and operating systems. CVE matching requires an unambiguous product mapping and a comparable version range. Your version declarations are not verified through computer access. Keep them up to date yourself after software changes. Unmapped products and unclear version ranges are marked accordingly.
Our own DebugTeam research notices are an additional, voluntary choice. Advisories are reviewed before release and sent only to matching inventories with this option enabled. This is not a promise to find every vulnerability or provide notice before public reporting. Confidential submissions are not published automatically. A submission does not authorize testing of other people's systems.
Limitations
External detection is incomplete. Publicly served version evidence can be outdated or inaccurate. No known matches do not mean that a website is secure. No exploits are run, no access permissions are tested and no updates are installed automatically.
A daily check may miss brief outages. Notifications may also be delayed or fail technically. The service replaces neither your own backups and maintenance nor a commissioned security assessment.
Costs and pentesting
Monitoring and introductions are free. There are no subscriptions. An actual pentest requires a separate agreement and explicit authorization between the parties involved.
Close
You can delete your account and websites at any time in your protected account area. Processing may be limited or stopped in cases of abuse.
Pentester profiles and direct contact
You can create a profile with a display name, description and specializations. Public visibility requires your explicit choice and verification of your email address. You can edit, hide or delete your profile at any time. Publish only details and links whose publication you are authorized to arrange. Profile details are self-reported. Email verification does not verify identity, qualifications or reliability. The operator may hide the public profile if its details are abusive.
Visitors can contact you directly through optional website links. DebugTeam does not arrange tests or authorize testing of other people's systems. The parties agree directly on scope, authorization and any payment. DebugTeam does not charge an introduction fee for using the directory.
Your account
You use a verified email address and your password to manage your account. In Account & security, you can enable an authenticator app and generate recovery codes. Keep these codes yourself; they are displayed only once. Use Forgot password to reset your password. An already enabled second factor remains in place.