Free security check

Is your site telling browsers to protect your visitors?

Enter a URL. We check the security headers and TLS certificate it actually serves - HSTS, Content-Security-Policy, frame protection, cookie flags, cert expiry - and grade it with concrete fixes.

We fetch the site once, over the public internet, and store nothing about the target.

Need a deeper scan?

Headers are the first layer. For vulnerability scanning of the application itself, use PennScan.