Free Website Security Checker
Is your site locked down? A plain look at the security basics — HTTPS, the right headers, and anything sensitive left out in the open.
What the Security scan checks
- Served over HTTPS
- HTTP redirects to HTTPS
- HSTS enabled
- Content-Security-Policy header present
- X-Content-Type-Options set
- X-Frame-Options set
- Referrer-Policy set
- Permissions-Policy set
- Cross-Origin-Opener-Policy set
- security.txt present
- Content-Security-Policy blocks inline scripts
- No tech disclosure in headers
- Platform detected (no version leaked)
- No mixed content
- Cookies use security flags
- No common sensitive files exposed
Common questions
Is the Security scan free?
Yes — run it on any live URL and see the score and every issue in plain language, free.
What does the Security scan check?
It runs the checks listed above, and shows the exact fix for each finding.
Do I need an account?
No account is needed to run a scan. Create a free account to save your results and see every fix.