How to use the Security Sentinel

A step-by-step guide for customers who already have the Security Sentinel in one of their seats.

By Al, BuzFind founderUpdated Portland, Indiana (Reading, PA roots)
Security Sentinel AI agent - Security Settings Checks
The Security Sentinel - Security Settings Checks

This guide shows you how to run the Security Sentinel, what to type, and how to read what it sends back. To see what it checks and which plans include it, read the Security Sentinel page.

Before you start

  • Open My AI agents, pick the Security Sentinel for a seat, and click Save selection.
  • The Security Audit also runs the Penetration Tester, so its findings show as Locked unless that agent has a seat too.
  • Know who manages your hosting or server settings, because many fixes are header changes made there, not on your pages.

Step by step

  1. Sign in and open My AI agents in the dashboard menu. Click the Security Sentinel to put it in one of your seats, then click Save selection.
  2. Open the Dashboard page. In the chat box, type what you need in plain words and include your website address.
  3. Wait while the check runs. The answer shows in the chat, and the full report is saved under Audit reports & fixes.
  4. Make the changes you agree with, then send the same request again to see what is still open.

What to type in the chat

Copy one of these requests and change the details to match your business.

“Run a security check on yourbusiness.com”
Use this for the regular look at your HTTPS setup, headers, mixed content and outside scripts.

“Run a security check on yourbusiness.com/checkout/”
Use this when one section, like a payment or booking page, runs on different software, so the check starts there.

“Check if yourbusiness.com is secure”
Plain wording like this also starts the Security Audit.

“Run a full site audit on yourbusiness.com”
Use this when you want security checked along with everything else in one report from 23 agents.

How to read the results

  • Look for findings Flagged by Security Sentinel; each one names the header, script host or page line it is based on.
  • A mixed content finding names the file that loads over plain http on an https page, so you know exactly what to change.
  • Start with items tagged critical or high, then work down to medium and low.

What to do next

  • Send the fix text to whoever runs your hosting or server, since most headers are set there.
  • If your site is hosted with BuzFind, use Fix this for me where it is offered; a backup is taken first, and Undo this fix puts things back.
  • Run the Security Audit again after each change to confirm the header now shows up.

Tips

  • A strict Content-Security-Policy can block your own forms, chat or tracking scripts, so try it in report-only mode first.
  • If a service like Cloudflare sits in front of your site, some headers can be added there instead of on the server.
  • The check only sees what any visitor can see, so pages behind a login are not checked.
  • Questions about software versions or old libraries that show in your pages fit the Penetration Tester better.

Questions about using it

Why does the Security Audit read so few pages?

Security headers are usually the same across a site, so it reads up to 3 pages. If one part of your site runs on different software, start a second check from that part's address.

I added a header, but the finding is still there. Why?

Your host or a cache may still be serving the old version. Clear the cache, then run the check again.

Do I need to give BuzFind a password or server access?

No. The check reads your public pages only, so all you type is the address.

Agents work better together. Here are specialists that pair well with the Security Sentinel:

  • Penetration Tester - Looks at your site the way an outsider would and flags the security gaps anyone can see: missing security headers, exposed details, and weak settings.
  • Technical SSR Sentinel - Checks your pages for technical SEO problems that stop search engines from finding, crawling, or indexing them.
  • Deployment Lead - Checks your site for problems that often show up around a launch or move: broken pages and links, redirect chains, mixed content, and header settings.

Need a different agent? Browse all 25 agent guides or see the full agent catalog.

Was this article helpful?