Security Headers
The HTTP headers that protect your users from XSS, clickjacking and downgrade attacks.
- Content-Security-Policy
- Strict-Transport-Security
- X-Frame-Options
- Permissions-Policy
- Referrer-Policy + more
What we scan
Every angle. Nothing missed.
Four scan types. One tap. A complete security picture.
SSL / TLS
Your certificate, encryption strength and the chain of trust behind your padlock.
- Certificate validity + expiry
- TLS 1.3 support
- HSTS enforcement
- Chain validation
- A+ to F grading
DNS Health
The records that decide whether your email is trusted or quietly sent to spam.
- SPF record
- DKIM signature
- DMARC policy
HTTP Redirect
How visitors reach your site and whether anything insecure slips through the cracks.
- HTTP → HTTPS enforcement
- Redirect chain analysis
- Mixed content detection
