Check your website's security in seconds
Get a simple grade and a plain-English list of what to fix. No signup and no software to install.
- No account needed
- Results aren't published
- Read-only checks
What we check
Secure connection
Your SSL certificate, its expiry date, and whether visitors are always sent to HTTPS.
Browser protections
Security headers that help stop clickjacking and malicious scripts.
Email spoofing
SPF and DMARC records that stop scammers sending email as your business.
Information leaks
Software versions, cookie settings and robots.txt entries that could help an attacker.
Deep scan for verified owners
Prove you own the site with a quick DNS record or file, and we'll also look for forgotten backups, exposed password files, open admin panels and old test pages.
How it works
- Enter your website. Just the address, like yourbusiness.com.
- We look at what's public. The same information any browser or mail server already sees. We never log in or try to break anything.
- Get your report. A letter grade, with the most important fixes listed first.