Know if your website is secure in 30 seconds.
A free scan of your site's security basics, explained in plain English, with copy-paste fixes for your host. No sign-up. Built for small teams and the agencies that run their sites.
Scan your site for freeComing next: monitoring
We'll re-check your sites and tell you when something breaks, like an expiring certificate or a removed header. Leave your details to hear when it launches.
See it in action
A 70-second scan of chillflareinnovations.com: the score, the fixes for its host, and the report you can hand to your developer or AI agent.
What we check
HTTPS & certificates
Redirects, HSTS, certificate expiry and weak TLS.
Security headers
CSP, clickjacking and content-type protection, referrer policy.
Cookies
Secure, HttpOnly and SameSite flags on every cookie.
Email spoofing
SPF, DKIM and DMARC, so nobody can send email as you.
Outdated libraries
Front-end JavaScript with known vulnerabilities.
Disclosure
A security.txt so researchers can reach you.
How it works
- 1.Enter your domain. We only look at what any browser can see.
- 2.Get a plain-English report with fixes for your host: Vercel, Netlify, WordPress, nginx and more.
- 3.Download the report for your developer or AI agent, apply the fixes, and scan again.
Running sites for clients? Monitoring will cover all of them in one place.