Shipped something fast? Get a plain-language security check in about ten seconds — no signup, nothing installed.
Only checks the domain you enter, using what your site already shows every visitor — never anything behind a login. Deeper testing requires your approval and a signed authorization before it runs.
What it checks
Encryption & certificate. Whether traffic is protected and your HTTPS certificate is healthy.
Security headers. The browser protections that keep your users safe from common attacks.
Email spoofing. Whether someone can forge email from your domain — SPF and DMARC.
Leaked details. Server and software versions you might be exposing by accident.