Free · No sign-up · Results in seconds
Free website security scanner. See what attackers see.
30+ checks in one scan: HTTPS, security headers, cookies, outdated software, malware signs, email spoofing protection, DNS and the subdomains you expose to the world.
Passive and safe: we load your homepage like a normal visitor and read public records. No attacks, no logins, no exploits.
Scanning…
- Connecting over HTTPS
- Reading security headers & cookies
- Detecting software & versions
- Looking for malware signs
- Checking email & DNS protection
- Mapping public subdomains
What we check
Five free tools' worth of checks in one scan.
Most free scanners look at one thing: headers, or SSL, or malware. Ours looks at all of them together and tells you how to fix each issue in plain English.
HTTPS & certificatesHTTPS, HTTP→HTTPS redirect, HSTS, mixed content, certificate expiry
Security headersCSP quality, clickjacking, MIME sniffing, Referrer & Permissions policy, COOP, CORS
CookiesSecure, HttpOnly and SameSite flags
Software & librariesWordPress version, end-of-life PHP, vulnerable jQuery, Bootstrap, AngularJS, Lodash and more, unprotected third-party scripts
Malware signsCrypto-miners, hidden iframes, obfuscated injected code
Email spoofingSPF, DMARC, DKIM, MTA-STS
DNSDNSSEC, CAA, IPv6
ExposureLeaked server versions, security.txt, robots.txt, subdomains in public certificate logs
A scan shows the outside. A pentest shows everything.
Our experts and AI agents test logins, APIs, business logic and AI features: the things no free scanner can see.