Website security test
How secure is your site
How secure is your site
for your visitors?
Check SSL certificate, HTTPS redirect, security headers, cookie settings and mixed content in seconds. The test is passive; it doesn't attack or load your site.
Only test sites you own or are authorised to test. This is a passive pre-check and does not replace a full penetration test.
Inspecting TLS connection and certificate
Checking HTTP → HTTPS redirect
Reading security headers
Scanning cookies and mixed content
What do we check?
01
SSL / TLS
Certificate validity, expiry date and protocol version.
02
Security headers
HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
03
Cookies
Secure, HttpOnly and SameSite flags on session cookies.
04
Information leaks
Exposed server and software versions, outdated JavaScript libraries.
05
Mixed content
Images, styles or scripts loaded over HTTP on an HTTPS page.
06
security.txt
A contact file for security researchers.