Free · no sign-up

Free website security scanner

Check your site's HTTPS, certificate and security headers in about 10 seconds. You get a score out of 100 and plain-language steps to fix every problem.

Only scan websites you own or have permission to check. The scan makes a few ordinary page requests to the homepage — nothing intrusive, no attacks, no crawling.

What we check

HTTPS and certificate, HTTP→HTTPS redirect, HSTS, Content-Security-Policy, clickjacking protection, MIME sniffing, Referrer-Policy, Permissions-Policy, cookie flags, version leaks and security.txt.

What we don't do

No attacks, no port scans, no login attempts, no crawling and no guessing of hidden pages. We look at what any browser visiting your homepage already receives.