Connection
HTTPS, response status and redirects.
Free tool / No sign-in required
Enter a URL. A light scan shows which protections are in place — and what deserves another look.
About 30 seconds
HTTPS, response status and redirects.
WAF and important security headers.
Technology, routes and client-side endpoints.
Need a clearer answer?
FAQ
No. The score covers only what is visible from the outside; authentication, authorisation and business logic require separate testing.
It reads public data at a low rate and does not scan ports or send attack payloads. Only scan a website you are authorised to test.
Before launch, after a major change, or when the website handles accounts, payments, uploads or private APIs.