Website Security Scanner
Enter any domain to scan its security headers, SSL certificate, and overall security posture. Instant results.
Want unlimited lookups?
Sign in with Google to remove the daily rate limit, save searches, and export results.
Non-invasive scan only
What Security Headers Do We Check?
Our scanner checks for 7 critical HTTP security headers that protect websites from common attacks: HSTS (forces HTTPS), Content-Security-Policy (prevents XSS), X-Frame-Options (prevents clickjacking), X-Content-Type-Options (prevents MIME sniffing), Referrer-Policy, Permissions-Policy, and X-XSS-Protection.
Why Check Website Security Headers?
- Sales teams — Assess a prospect's security maturity before pitching security products
- Security researchers — Quickly evaluate a website's baseline security posture
- Developers — Verify your own site's security configuration
- Due diligence — Check vendor security before signing contracts
Frequently Asked Questions
What security headers does this tool check?▾
We check for HSTS (Strict-Transport-Security), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and X-XSS-Protection. These headers protect against common web attacks like XSS, clickjacking, and MIME sniffing.
What is a good security score?▾
A score of 80+ indicates strong security headers. 60-79 is acceptable but has room for improvement. Below 60 means critical headers are missing and the site may be vulnerable to common web attacks.
Does this scan find all vulnerabilities?▾
No. This is a header-level scan that checks publicly visible security configuration. It doesn't test for application-level vulnerabilities, SQL injection, or authentication flaws. For a full security audit, use a dedicated penetration testing service.
Is the scan safe for my website?▾
Yes. We only make standard HTTP requests to check response headers and publicly available files like security.txt. No invasive testing or exploitation attempts are made.
Company data by country
Search official company registers — free, no signup. Pick a country to browse the register, run lookups, and open individual entity records.
Need the official record? 🔍
Get a dated, source-cited record from the company's own national register — and an email alert whenever its registration details change.