What does the free scan actually check?
It reads public data only: your domain registration record (RDAP/WHOIS), DNS answers (nameservers, mail records, DNS provider), and your public homepage (to fingerprint the providers and tools you use and find the social profiles you link to). It runs in under a minute, needs no login, and never authenticates to anything.
Do you store my passwords?
Never. This is the design decision the whole product is built around: Stedra records ownership and recovery metadata — who holds an account, who the backup is, where recovery points — never the credentials themselves. There is no credential vault to breach, because there is no credential vault.
Is it really free?
Yes — during beta the entire product is free: every feature, no card, no trial clock. The only thing we ask for is feedback.