Free Website Security Checkers
Instant checks for SSL, security headers, CORS, cookies & DNS — no account required
SSL/TLS
Check SSL certificate validity, expiry date, cipher suites, and TLS version configuration.
Check any domain →Security Headers
Check for Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and other critical security headers.
Check any domain →CORS
Detect CORS misconfigurations that allow unauthorized cross-origin requests to your API.
Check any domain →Cookie Security
Check session cookies for HttpOnly, Secure, SameSite flags and other security attributes.
Check any domain →DNS Security
Check DMARC, SPF, DKIM, DNSSEC and other DNS security records for email spoofing and phishing protection.
Check any domain →