Free · No account needed · About 8 seconds
35 checks on the domain, the certificate, the email, the security headers, the SEO and the network. One grade, the three most serious findings on top, a link you can send to your client, and a PDF to download.
We request the home page once and run DNS queries. Nothing intrusive; the site will not notice.
Does it answer, how fast, over which protocol, with compression, without redirect chains.
Valid certificate, modern TLS, and the headers that protect visitors.
Registration in order, expiry far away, DNS answering.
SPF, DKIM and DMARC: whether others can send email in your name.
Whether Google may index the site, and whether the basics are there.
A is 90 or more; F is under 40. If fewer than 60 % of the checks could run, there is no grade: an F caused by a timeout on our side is worse than no grade at all.
Anyone with the link. Reports are not listed anywhere and search engines are told not to index them. Anonymous reports are deleted after 30 days.
It is a to-do list, not a verdict. Most items are fixed in minutes by whoever manages the hosting or the DNS, and each finding says how.
Yes: every report has a “Download PDF” button that gives you the finished file, the same on a computer or a phone.
Each X-ray has about 8 seconds so that the page answers quickly. What does not fit (like DKIM, which tries many selectors, or issued certificates, which take longer) is completed once the page is open and saved in the same report. Exposed files and ports are never included: they are only checked on verified domains.
See every DNS record of a domain: A, AAAA, CNAME, NS, MX, TXT, SOA and CAA, as our resolve...
Registrar, creation and expiry dates, nameservers and transfer lock of any domain. The exp...
Is the certificate valid, who issued it, when does it expire and which TLS versions does t...
IP address, country, network and the hosting provider we deduce from it. Also whether the...
MX, SPF, DKIM and DMARC. If any of these is missing, anyone can send email in your name, a...
HSTS, Content-Security-Policy, X-Frame-Options and the rest: the headers that protect your...
Where does a URL end up, and through how many hops. Redirect chains slow every visit down...
Meta robots, X-Robots-Tag header and robots.txt. Launching a site with a "noindex" left ov...
We request the site right now from our server and tell you the status code and the respons...
Write a network in CIDR notation and get the mask, the range of usable addresses, the broa...
Build the five fields of a cron line without guessing, read back in plain words what an ex...
