Free passive web security scanner
See what's exposed.In one pass.
Headers, TLS, cookies, and DNS. No crawling, no exploits, no account required.
Coverage
What we inspect
Public, non-intrusive checks only.
Headers & CSP
Missing or weak security headers, including Content-Security-Policy.
See each result
TLS & certificates
Certificate chain, expiry, and transport posture.
See each result
Cookies
Secure, HttpOnly, SameSite, and related attributes.
See each result
CORS
Open or reflected cross-origin access on the page response.
See each result
DNS mail & CAA
SPF, DMARC, CAA, and DNSSEC signals.
See each result
Page integrity
Mixed content and Subresource Integrity gaps.
See each result