Free · No account needed · About 8 seconds
Twenty checks on the domain, the certificate, the email, the security headers and the SEO. One grade, the three most serious findings on top, and a link you can send to your client.
We request the home page once and run DNS queries. Nothing intrusive; the site will not notice.
Does it answer, how fast, over which protocol, with compression, without redirect chains.
Valid certificate, modern TLS, and the headers that protect visitors.
Registration in order, expiry far away, DNS answering.
SPF, DKIM and DMARC: whether others can send email in your name.
Whether Google may index the site, and whether the basics are there.
A is 90 or more; F is under 40. If fewer than 60 % of the checks could run, there is no grade: an F caused by a timeout on our side is worse than no grade at all.
Anyone with the link. Reports are not listed anywhere and search engines are told not to index them. Anonymous reports are deleted after 30 days.
It is a to-do list, not a verdict. Most items are fixed in minutes by whoever manages the hosting or the DNS, and each finding says how.
Yes: every report has a print version that your browser saves as PDF.
Each X-ray has a time budget of a few seconds so that the page answers quickly. Slow checks (like DKIM, which tries many selectors) may not fit. Monitored sites get everything, every few minutes.
See every DNS record of a domain: A, AAAA, CNAME, NS, MX, TXT, SOA and CAA, as our resolve...
Registrar, creation and expiry dates, nameservers and transfer lock of any domain. The exp...
Is the certificate valid, who issued it, when does it expire and which TLS versions does t...
IP address, country, network and the hosting provider we deduce from it. Also whether the...
MX, SPF, DKIM and DMARC. If any of these is missing, anyone can send email in your name, a...
HSTS, Content-Security-Policy, X-Frame-Options and the rest: the headers that protect your...
Where does a URL end up, and through how many hops. Redirect chains slow every visit down...
Meta robots, X-Robots-Tag header and robots.txt. Launching a site with a "noindex" left ov...
We request the site right now from our server and tell you the status code and the respons...