How secure does your website look from outside?
Free tool · score out of 100
Type your website address. We check HTTPS, security headers, cookies and email protection, then tell you what to fix in plain English.
What we check
- HTTPS works, and plain http:// sends visitors to https://.
- Security headers: HSTS, Content-Security-Policy, framing, content type, referrer and permissions.
- Cookie flags: Secure, HttpOnly and SameSite.
- Email protection in DNS: SPF and DMARC.
- Old software versions shown on your home page, such as WordPress.
What we never do
We do not scan ports, guess hidden pages, send attack payloads or crawl your site. Testing those needs your written permission, which is what a website vulnerability assessment is for.
