Available
Web security check
Reads your site's HTTPS response headers and assesses the protections the browser applies to your visitors.
- HTTPS, HSTS and redirection
- CSP, clickjacking, MIME type
- Cookie attributes
Free tools
Check your domain in seconds
Real technical checks, free and without sign-up. You enter a domain, we read what is already public and hand you a readable report with the exact fix for each finding.
- Available
DNS and email deliverability
Reads your public DNS records and checks whether your domain can be spoofed in a phishing campaign.
- SPF, DMARC, DKIM
- MX servers and NS redundancy
- Fixes ready to publish
- Soon
Performance audit
Measurement of real load time and Core Web Vitals metrics, with blocking points ranked by impact.
- Core Web Vitals
- Payload and render blocking
- Fix prioritisation
In development.
What these tools do — and do not do
They observe only what your server and your DNS zone already publish to everyone: one HTTPS request to your home page, a few DNS lookups. Nothing is sent to your users, no account is tested, no port is scanned, no vulnerability is exploited. They are therefore surface indicators: they spot missing or dangerous configuration, but they replace neither an application audit, nor a penetration test, nor a code review. A good score does not mean your system is secure — it means these particular checks pass, at this moment.
Acceptable use
- Passive, read-only checks, one request per run.
- Test only domains you own or are explicitly authorised to test.
- Certain sensitive domains (government, banking) are refused automatically and require written authorisation.
- Reports are generated on demand and are not published.
Coming soon
A one-off check shows the moment. Monitoring shows the drift.
A configuration that is correct today can be broken tomorrow by a release, a change of supplier or an expired certificate. We are preparing a subscription for continuous checking: repeated runs, history, email alerts and exportable reports. It is not open yet.
Be told when it opens