Free Website Security Checker
Check important security configuration settings on a public webpage — without a penetration test or full security audit.
What is Website Security?
A website security checker inspects public HTTP response headers and page configuration that reduce common risks. It does not attack or exploit the site.
Why it matters
Missing configuration leaves avoidable gaps (downgrade attacks, clickjacking, script injection). Configuration checks catch the common ones quickly.
Common problems
- HSTS missing
- Cookies without Secure/HttpOnly
- Missing frame protection
- Mixed content on HTTPS pages
- Exposed server information
How to fix them
Add recommended headers at your server or CDN. Start with HSTS and frame protection if HTTPS is already on.
Example
Example: HTTPS on but HSTS missing → clients are not told to force HTTPS on future visits.
FAQ
Is this a penetration test?
No. Basic automated security configuration check — not a penetration test or complete security audit.
Does it claim my site is secure?
Never. It lists what was and was not detected for public configuration.
Is it free?
Yes — free, no signup.