Security Headers
The HTTP headers that protect your users from XSS, clickjacking and downgrade attacks.
- Content-Security-Policy
- Strict-Transport-Security
- X-Frame-Options
- Permissions-Policy
- Referrer-Policy + more
What we scan
Website security check types in PatchPings
Four checks. One tap. A complete website security checker picture — every angle, nothing missed.
One PatchPings website security check runs four checks in parallel: security headers, SSL/TLS, DNS health and HTTP redirects. You get a single grade plus the issues and fixes for each area — not four separate tools to compare by hand.
Use the guides below for setup details on SSL grades, DMARC and HTTPS redirects. Product overview lives on features; the step-by-step flow is on how it works.
Scan coverage
What scan types does PatchPings run?
Each type surfaces specific checks, a status per finding, and a path to fix what fails — headers, SSL/TLS, DNS health, and redirects.
Security Headers — CSP, HSTS, X-Frame-Options, Permissions-Policy, Referrer-Policy and related headers that reduce XSS, clickjacking and protocol downgrade risk. Run a focused pass on the security headers checker.
SSL / TLS — certificate validity and expiry, TLS support, HSTS enforcement, chain validation and A+ to F grading for the padlock visitors trust. Run a focused check on the SSL certificate checker.
DNS Health — SPF, DKIM and DMARC records that decide whether mail from your domain is trusted or filtered as spam. Verify policy presence on the DMARC checker.
HTTP Redirect — HTTP to HTTPS enforcement, redirect chain length and mixed content that can leave insecure assets on an otherwise secure page.
SSL / TLS
Your certificate, encryption strength and the chain of trust behind your padlock.
- Certificate validity + expiry
- TLS 1.3 support
- HSTS enforcement
- Chain validation
- A+ to F grading
DNS Health
The records that decide whether your email is trusted or quietly sent to spam.
- SPF record
- DKIM signature
- DMARC policy
HTTP Redirect
How visitors reach your site and whether anything insecure slips through the cracks.
- HTTP → HTTPS enforcement
- Redirect chain analysis
- Mixed content detection
FAQ
FAQ
Straight answers about PatchPings scan types.
Is this one scan or four separate tools?
One PatchPings scan runs four checks in parallel and returns a single grade plus the issues and fixes for each area — not four separate tools to compare by hand.
How do the dedicated checkers relate?
The DMARC, SSL certificate, and security headers checkers reuse the same homepage website security check, focused on DNS health, TLS, or headers. Full scans on this site and in the app still cover all four types together.
Is scanning free?
Yes. Guest mode lets you try a few scans with no sign-up. The Free plan covers 1 site and 5 audit reports per month with PatchPings-branded PDF reports.
Can I get an email report?
Yes — when you ask for it after a scan, PatchPings can send the report to the email you provide.
