Security headers & SSL
CSP, HSTS, X-Frame-Options, cookie flags, TLS version and certificate expiry — plus 15 more header-level checks.
Free Full 51-check scan · no card needed
Find every security & SEO issue before your client does.
Paste a URL. In under a minute you get 51 checks across SSL, security headers, DNS and email, the OWASP Top 10 and SEO — with the exact fix for everything that fails.
VS
- Passive — nothing is attacked
- Results in about 45 seconds
- Deleted after 3 days
Every scan checks
- OWASP Top 10
- SSL / TLS
- HSTS & CSP
- SPF · DKIM · DMARC
- Core Web Vitals
- Schema & Open Graph
What you get
One scan, the whole picture
Built for freelancers, developers and agencies who check sites before launch, during audits and after every change.
OWASP Top 10 report
Findings mapped to the 2021 OWASP categories, with the detected tech stack and any known CVEs against it.
SEO & technical signals
Titles, meta descriptions, canonicals, robots.txt, sitemap, structured data, Open Graph, alt text and hreflang.
Copy-paste fixes
Every failed check comes with the exact Nginx, Apache or HTML snippet — or download one fix script for the lot.
AI security brief
A plain-English summary of what matters most, ranked by impact and effort — and a chat that answers questions about your scan.
Client-ready reports
Export PDF, JSON or CSV, share a read-only link, or send a white-label report under your agency's brand.
How it works
From URL to fix list in a minute
No install, no DNS changes, nothing to configure on the site you're checking.
1
Paste a URL
Any public site — yours, a client's, or a competitor's. Sign in with Google or email in seconds.
2
Get the report
51 passive checks run in parallel. Nothing on the site is attacked, logged into or changed.
3
Fix and share
Copy the fixes, rescan to confirm, then send the report to your client or your team.
51checks per scan
<60stypical scan time
$0while payments are off
3 dayslongest we keep scans
Check a site in the next minute.
Free, passive, and deleted after 3 days.
