Skip to content

Free tool

Is your website actually locked down?

Enter any website and I'll check the things attackers probe first: the HTTPS redirect, the SSL certificate, security headers, cookie flags, and whether your server is leaking version numbers. Nine checks, one number, zero signup.

Checks HTTPS redirect, SSL expiry, HSTS, nosniff, clickjacking protection, cookie flags, and more. Read-only, nothing is stored.

The other 10 free tools

All free, no signup. See the full instrument panel or have me fix what they find.