Free site scan
Free website health check: certificate,
security headers, DNS and email in 30 seconds
Paste a domain and we'll look at what a visitor, a search engine, and a mail server all see, from the certificate and security headers to DNS and email records and the page itself. Takes about thirty seconds, no account needed.
We check what's publicly visible from our own servers: the certificate, response headers, DNS and email records, and the page's own HTML. We don't fetch anything the page links to, and this doesn't check the site against any particular standard.
Sample report
example.com
100% of checks completed
Where to focus first
Security headers
- No HSTS headerMedium
Nothing tells browsers to always use a secure connection to this site.
- No content security policyMedium
Nothing restricts which sources of scripts and other resources the page can load.
- No referrer policyLow
Nothing controls how much of this site's URLs are sent as a referrer to other sites.
- No permissions policyLow
Nothing restricts which browser features (camera, geolocation, and similar) the page can request.
- No X-Content-Type-OptionsLow
Browsers aren't told to respect the declared content type, which allows MIME-sniffing.
Email authentication
- DMARC policy is noneMedium
Failing email is only reported on, never rejected or quarantined.
- No DMARC aggregate reports requestedLow
Without an rua address, authentication failures happen with nothing sent back to review.
Ten checks, one report
Each scan runs the same ten checks and combines them into one score. The results shown here are from the sample report.
Connectivity
Looks good100 / 100Whether the site answers over HTTP and HTTPS, and whether plain HTTP moves to a secure connection.
SSL certificate
Looks good100 / 100The certificate presented on the secure connection, including who issued it, how it's signed, and how long it has left.
Security headers
Needs attention55 / 100Response headers that control how browsers treat the site, such as HSTS, a content security policy, and a few others.
DNS
Looks good90 / 100How the domain resolves, and whether it has more than one nameserver to fall back on.
Email authentication
Needs attention80 / 100SPF and DMARC records, which are what stop other people from sending email that claims to be from this domain.
Search & metadata
Needs attention85 / 100Title, description, canonical tag, and the other signals search engines read off the page.
Performance
Looks good95 / 100One server-side timing measurement, from one location, just now, not a synthetic or real-user performance test.
Accessibility
Needs attention85 / 100Static checks over the page's raw HTML, covering landmarks, alt text and heading order. This reflects what's readable in the markup, not a full evaluation of how the page works for assistive technology.
Links & resources
Looks good100 / 100What the page declares about its own links and scripts. We never fetch a linked page, so we can't say whether those links work.
Domain registration
Looks good100 / 100Registration status and expiry from the domain's public registry record.