Shipped something fast? Get a plain-language security check in about ten seconds. No signup, nothing installed — it only reads what your site already shows every visitor.
Only checks the domain you enter. It looks at public information — response headers, your certificate, and DNS records — never anything behind a login. Deeper testing that actually probes your app is a separate, paid service and only ever with your written go-ahead.