Free · Instant · No signup
Is your website secure?
Get an instant security grade for any website. We check 25+ real issues — TLS, headers, cookies, exposed files, and email spoofing — and tell you exactly how to fix each one.
Try:
TLS & HTTPS
Certificate validity, expiry, and secure-transport setup
Security headers
HSTS, CSP, clickjacking and MIME-sniffing protection
Exposure checks
Exposed .git/.env files, backups, and admin panels
Email spoofing
SPF and DMARC records that stop domain spoofing
This is a passive, external scan — it only observes what any visitor's browser could see, plus a few well-known public paths. No exploitation, fuzzing, or login attempts.