Website health and security checker
Enter a website address and get a full report in about a minute: security headers, HTTPS and SSL, email security, speed and Core Web Vitals, SEO, accessibility, mobile design and outdated software, with a score, a grade and plain-English fixes.
Passive checks only. Reports are deleted after 7 days
This tool performs passive, non-intrusive checks only. It reads what any visitor's browser would see: it doesn't log in, submit forms, guess passwords or probe for weaknesses.
Only scan websites you own or have permission to test. Results are automated hints, not a full security audit. The address you scan is sent to my server and to Google PageSpeed Insights, Mozilla Observatory and SSL Labs to run the checks, and the report is deleted after 7 days. Privacy policy
How it works
The checker loads your page once, the way a browser does, and reads its security headers, cookies, HTML and the small public files around it (robots.txt, sitemap.xml, security.txt). It looks up your domain's SPF, DMARC and DKIM records, asks Google PageSpeed Insights to run Lighthouse on mobile and desktop, gets a header grade from Mozilla's HTTP Observatory and, when it's switched on, a TLS grade from Qualys SSL Labs. It also follows up to 50 links on the page to find broken ones and compares the JavaScript libraries it sees with the Retire.js list of known vulnerabilities.
Each problem gets a severity, from Critical to Low, an explanation in plain English and the fix. Category scores combine into an overall score out of 100 and a grade from A to F. Results for the same address are reused for a few hours to stay inside the free API limits, and every report, including the address, is deleted automatically after a week.
Questions people ask
Is it safe and legal to scan a website with this tool?
The checks are passive: the tool reads the same public page, headers and DNS records any visitor's browser gets, plus a few links. It doesn't attack, fuzz or log in. Still, only scan sites you own or are allowed to test.
Why is my score lower than in other tools?
This report combines security, speed, SEO, accessibility, design and technology, so one weak area pulls the overall score down. Open each category to see exactly what cost points, starting with the Top 5 fixes.
What does each grade mean?
A is 90 or more, B 80 to 89, C 70 to 79, D 60 to 69 and F below 60. Any critical security problem caps the security score below 50.
How do I share or save the report?
Use “Copy share link” to send it to someone, or “Download PDF” to save it. Shared links work until the report is deleted, a week after the scan.
Why can't it scan my local or internal site?
Private and internal addresses (like 192.168.x.x, 10.x.x.x or localhost) are blocked on purpose, so the tool can't be used to reach networks behind a firewall.
More free tools
Found a bug or want another tool? Contact