Free Website Security Tools
Everything you need to audit and improve your web security — no account required
Security Checkers
Instant checks for any domain — paste a URL and get results in seconds
SSL/TLS
Check SSL certificate validity, expiry date, cipher suites, and TLS version configuration.
Check any domain →Security Headers
Check for Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and other critical security headers.
Check any domain →CORS
Detect CORS misconfigurations that allow unauthorized cross-origin requests to your API.
Check any domain →Cookie Security
Check session cookies for HttpOnly, Secure, SameSite flags and other security attributes.
Check any domain →DNS Security
Check DMARC, SPF, DKIM, DNSSEC and other DNS security records for email spoofing and phishing protection.
Check any domain →Compare & Rank
See how domains stack up against each other
Learn
Understand what you're checking and how to fix it