Inspect the security signals your website exposes.
Run a passive review of HTTPS, response headers, cookies, and visible configuration signals on a website you are authorized to check.
- HTTPS and transport observations
- Browser security response headers
- Visible cookie flags
- Public configuration indicators
A report with clear boundaries.
Each report lists the checks performed, the resources reached, and any checks skipped. Findings include observed or heuristic confidence so you can judge the evidence.
- Passive checks only: no exploitation, credential guessing, or destructive testing.
- Missing headers can indicate hardening opportunities, not proven exploitable vulnerabilities.
- This is not a penetration test or a security certification.
Account and target verification are required for subscriptions. Payment and report access are confirmed by the server.
One-time purchases cover one paid run and do not renew. Monthly plans renew automatically and include four paid runs per billing period for one verified target. Unused runs do not roll over. Cancel through the billing portal before your next renewal; access continues until the current paid period ends. Prices in USD. You’ll see the total before payment. Terms of use · Privacy policy.
Before you start
What does the free preview include?
Passive homepage check. The preview shows up to five findings with the scope and limitations of the scan. Zero findings means no issues were detected by those checks, not a guarantee that none exist.
What does a paid run include?
One domain, up to 100 pages per run. A confirmed purchase unlocks the paid allowance and full available findings, plus HTML and PDF exports. Reports remain private to the owning session or account.
Can I check a private target?
This form accepts public targets only. Internal addresses, embedded credentials, unsafe destinations, and unauthorized scans are blocked. Authenticated endpoint credentials are not accepted by this form.
