MCProof
Who has tried to break into your website?
Every public website gets probed by automated bots looking for password files, old plugins and login pages to guess at. Your server writes all of it down in its access log, and almost nobody reads it. Upload yours and we'll show you every attempt: who tried, what they went after, and whether anything got through.
Your log is analyzed in memory and never stored.
Where do I find my access log?
- cPanel hosts (Bluehost, HostGator, SiteGround, GoDaddy…): Metrics → Raw Access → download.
- WordPress on managed hosting (WP Engine, Kinsta, Flywheel): your host dashboard → Logs → access log.
- Your own server:
/var/log/nginx/access.logor/var/log/apache2/access.log. - Cloudflare / Vercel / Netlify: export request logs as JSON lines.
- Wix, Squarespace, Lovable and other builders usually don't give you raw logs. Our daily monitoring watches those sites from the outside instead.
A "got a success response" result means your server answered 200 to an attack request. It is a lead to check, not proof of a breach, because many sites answer 200 to every address. Automated analysis, not a forensic investigation.