Public web security scanner

Scan a public domain before small issues become remediation work.

Run a free outside-in check for headers, TLS signals, DNS basics, and exposed public metadata. For authorized assets only.

Public, non-invasive checks only. Run scans only against domains you own or are authorized to review.

Free scan preview

store.example.com

Score 74

Overall score

74/100

Public baseline with header hardening items.

Affected checks

Public signals only

Medium

Missing Content-Security-Policy

HTTP response headers

Low

HSTS not detected

HTTPS configuration

Info

TLS certificate visible

Public TLS endpoint

Free scan

Fast public checks for one domain.

Report preview

Severity, affected checks, and plain-English notes.

Verified workspace

Deeper workflows require account access and authorization.

Included public checks

The free scan reviews browser-visible and DNS-visible signals. It does not attempt exploitation, login testing, password testing, or internal network discovery.

Security headers
TLS certificate signals
Public DNS records
Technology hints
Cookie flags
Exposed response metadata

Need exports, history, or team review?

Upgrade after the free scan to keep reports and track remediation.

View pricing