Free website security checkHow safe is your website?
Enter your address. You get a grade from A+ to F for security headers, certificate and email protection, and see what to fix first.
Only what anyone can see from the outside. Results are deleted after ten minutes.
Closed:
Couldn’t be read:
An audit goes through your code line by line and finds what a scan from the outside can’t see. Then I fix it, or brief your team on how to.
What the twelve windows are
Security headers
Rules your server gives the browser about what to block on the page.
- Content-Security-Policy
- HSTS
- Clickjacking protection
- X-Content-Type-Options
Traffic
How visitors reach the site, and what comes along when the page loads.
- Referrer-Policy
- Redirect to https
- Cookies
- External scripts
Certificate and email
Your SSL certificate, and what stops someone sending email in your name.
- Certificate
- SPF
- DMARC
- DKIM
Questions
Is it really free?
Yes. No account and no email address.
Does the check touch my website?
It loads your start page like any visitor and reads your public DNS records. It never logs in, tries passwords or looks for hidden files.
How is the grade calculated?
The letter comes from your security headers, with the same scoring as Mozilla Observatory. Certificate and email protection sit beside it and don’t change the letter.
Why did my site get no grade?
Some sites block automated visits. The check then gets an error page instead of your start page, so it gives no grade.
Is my result saved?
For ten minutes, so the same site isn’t checked over and over. Then it’s deleted. I keep no list of checked sites.
Can I fix this myself?
Most of it. Your host or developer can change headers and DNS records. If you want it done for you, book a security audit.
What can’t the check see?
Everything inside: your code, your logins, your database. That takes an audit.
Let's talk
Pick what fits best, tell me a little about it, and I'll get back to you.
Contact
What happens next
- You tell me what you have.
- You get a fixed price.
- I start the work.