Free external security assessment
Know where your website actually stands on security.
Enter your domain to get a plain-English security assessment — a real score, prioritized findings, and concrete steps to fix them. No account required.
How it works
Enter your domain
No account needed — just the domain you want assessed.
We run real external checks
HTTPS and certificates, security headers, DNS and email protections, and more — all from outside your website, the way a visitor sees it.
Get an understandable score
0–100, explained category by category — never just a number with no reasoning behind it.
Fix what matters most
Each finding explains what we found, why it matters, and how to fix it — in plain English, with technical detail available if you want it.
What we check
Transport security
HTTPS availability, certificate validity, and TLS configuration.
HTTP headers
Browser-enforced protections against common web attacks.
Email security
SPF and DMARC — how easily your domain could be spoofed in email.
DNS & domain
Registration health, expiry, and domain integrity.
Cookies
Whether session and authentication cookies are protected.
Information exposure
What your website reveals to the outside world.