Free scanner · seconds · no sign-up
Check your website security
Enter an address and in seconds we check the essentials from the outside: encryption, SSL certificate, security headers, detected system and WordPress version, plus known vulnerabilities (CVE) of plugins visible in the page code.
The scanner makes an ordinary request to the site (like a browser) and does not store the addresses checked. Anti-bot verification protects the server from automated abuse.
What does the scanner check?
- Whether the site runs over HTTPS and the SSL certificate is valid (and when it expires).
- Security headers: HSTS, Content-Security-Policy, X-Frame-Options and more.
- Whether the site openly reveals its system or server version (which makes attacks easier).
- Which system (CMS) was detected and whether there is mixed content.
Suspect your site has malware? Run a separate website malware test.