Free Website Security Tools
Focused checkers for every layer of your website's security stack. All free, all instant, all edge-cached.
Test HSTS, CSP, X-Frame-Options, Referrer-Policy and Permissions-Policy in seconds.
Verify the SSL certificate for any domain in seconds.
Confirm modern TLS support for any hostname.
See exactly which cookies a site drops and whether they're safe.
Detect risky CORS misconfigurations in one request.
See exactly where a URL ends up and how it gets there.
Inspect raw HTTP response headers for any URL.
All your DNS records, one clean view.
Confirm security researchers can reach you.
Make sure crawlers see what you meant them to see.
Confirm your sitemap is discoverable and valid.
Answer 'is this link safe?' before you click.
Find open web ports on any domain in seconds — free, no signup.
Registrar, domain age, expiry and status for any domain.
IP addresses, hosting org, ASN and geolocation for any domain.
Server, CMS, framework, CDN and WAF fingerprinting for any site.
Reveal where bit.ly, t.co and other short links really go.