Free website security check

How secure is
your website really?

Welcome! Just enter your web address – within seconds we check more than 30 points: security headers, cookies, TLS encryption, exposed files, CORS and e-mail protection. With concrete fixes – and a card to share.

  • ✓30+ checks
  • ✓Results in seconds
  • ✓No sign-up

The check only sends harmless, read-only requests – like a normal visitor – and checks each domain at most every 15 minutes. Please only check websites you are responsible for.

What we check

Eight areas are checked in parallel – results appear as soon as they are ready.

Security headers
Clickjacking, HSTS, CSP, MIME sniffing, referrer & server banner
Cookies & sessions
Secure, HttpOnly and SameSite flags, session lifetime
TLS & certificate
TLS 1.0/1.1, weak cipher suites, expiry & issuer
HTTPS & mixed content
Redirect from http:// and resources loaded unencrypted
Exposed files
.git, .env, backups, package.json, directory listing, error pages
CORS & redirects
Foreign origins, credentials and open redirects
Source analysis
Subresource integrity, sensitive form fields, CMS version
E-mail security
SPF, DKIM and DMARC against e-mail spoofing

More free checks

SEO check → Indexing, title & meta, structured data, links, images and loading speed. GEO check → How well ChatGPT, Claude & Perplexity find, read and quote your website.