Public connections
See domains, open ports and services that can be reached from the Internet.
Scan coverage
What does the scan cover?
An outside view of your website, with results and evidence you can review.
Security configuration
Check encrypted connections, browser protections and signs of known vulnerabilities.
Risk signals
Check 12 common web risk classes using bounded tests.
Need a clearer answer?
Need a deeper assessment?
Friday Works tests sign-in, permissions and critical flows to help you validate risks and prioritise fixes.
Frequently asked questions
How can I check a website for vulnerabilities?＋
Enter a domain you own or are authorised to test, confirm permission and start the scan. The report groups open ports, security configuration and vulnerability signals by priority.
What does the free website vulnerability scanner check?＋
It checks DNS, open ports, SSL/TLS, security headers, cookies, known vulnerabilities and signals across 12 common web risks including XSS, SQL injection, SSRF and CORS.
Can this tool prove that a website is completely secure?＋
No. Results cover what the scanner can observe externally; authentication, authorisation, APIs and business logic still require manual testing within an authorised scope.
Can a website vulnerability scan disrupt the target?＋
The tool is rate-limited and excludes checks that could disrupt the website. Only scan a website you own or have explicit permission to test.
How is a vulnerability scan different from a penetration test?＋
An automated scanner finds signals on the public surface. A deeper assessment also tests authentication, authorisation, APIs and business logic, removes false positives and verifies real impact.
When should I request a deeper security assessment?＋
Before launch, after a major change, or when the website handles accounts, payments, uploads, sensitive data or private APIs.