I just scanned my personal site. It came back saying 1 directory traversal problem and 1 interesting file, and that if I wanted to find out what they were, I'd have to pay. And good grief, there's a lot of text there.

To me, that just seems scammy. As in "click here for your free credit report... oh! We've found problems. Pay to see what they are!"

Looking through my web server logs I'm not quite sure what the problems are, or how you determined I had the problem. Did I maybe return an error message with a 200 status code instead of a 403 forbidden? I've got some redirects on my site, did you take the 301 as a bad sign?

Looks like you're using skipfish for the scanning engine?

Who is your target market? I could see companies using something like this to fill the box on PCI compliance, but would need a lot more control over the report (eg "get rid of that low category") and would need a lot more details about how the scan was performed in order to satisfy an auditor. People who just want to display a seal on their signup page will want something a lot more low key, and already have lower cost options.