Free Security Check

Security Posture Checker.

Run a free, non-invasive assessment of your own public website. We inspect TLS, security headers, and email DNS using only publicly available information. No scanning, no intrusion — and we do not store your URL or results.

Public information only: DNS records, TLS certificate metadata, and HTTP response headers. No port scanning, no intrusion, no private networks. Private, loopback, and internal addresses are refused. Submitted URLs and results are not stored.

— What we check

Seven categories, graded A–F

Website & Transport

HTTPS reachability, TLS certificate validity and expiry, protocol version, and whether http:// redirects to https://.

Security Headers

HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy — present, missing, and why each matters.

Email Security

SPF and DMARC records, plus a best-effort, non-conclusive DKIM check of common selectors.

DNS & Exposure

CAA and name-server resilience, plus Server / X-Powered-By version leakage.