Free website security tools
Instant checks for any domain, using only what it publishes to everyone. Results in seconds, with what every finding means.
SPF, DMARC & DKIM checker
Check any domain's SPF, DMARC, DKIM, MTA-STS and TLS-RPT records in seconds: can attackers send email in its name? Free, no sign-up.
Check a domainSecurity headers checker
Test any website's HTTP security headers: HSTS, Content-Security-Policy, X-Frame-Options, cookies and more, with what each finding means. Free, no sign-up.
Check a domainSSL certificate & TLS checker
Check any website's SSL certificate and TLS setup: expiry, host name, trust chain, key strength, obsolete TLS 1.0/1.1 and TLS 1.3 support. Free, no sign-up.
Check a domainSubdomain finder
Find a domain's subdomains from public certificate logs and DNS, and check them for subdomain takeover, dangling DNS records and exposed test or admin hosts. Free, no sign-up.
Check a domainWant the full picture?
The full scan runs all 97 checks: exposed files, open databases, actively exploited CVEs, subdomain takeovers - with copy-paste fixes. Your first scan is free.
Scan your domain free