Website Security Scanner

A free, outside-in health check of your website's security. Get a score out of 100, a grade, and a short list of what to fix first.

Seven checks, explained simply

Every finding in your report says what we saw, why it matters for your business, and what to change.

SSL / HTTPS

Is the certificate valid and trusted? When does it expire? Does every visitor get redirected to the secure https:// version? Are outdated protocols like TLS 1.0 still switched on?

Security headers

Content-Security-Policy, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy: small settings that make browsers block common attacks.

Server and cookies

Does the server reveal its exact version? Are login cookies marked Secure and HttpOnly? Are risky HTTP methods enabled?

Email security

SPF, DMARC and DKIM records decide whether Gmail and Outlook accept fake emails sent in your company's name. Missing records are the reason many invoice frauds work.

Domain and DNS

Name servers, mail servers and CAA records, which limit who can issue certificates for your domain.

Technology fingerprint

We identify your CMS, server software and JavaScript libraries, and flag versions that are visible to attackers or known to be outdated.

Exposed files

We request a short list of commonly leaked paths, such as .env, .git/, database backups and server status pages, and report any that are publicly readable.

Free report or Premium Report?

Start free. Upgrade only if you want the complete picture for your developer.

Free report

₹0
  • Security score out of 100 and grade A to F
  • Up to 8 most important findings
  • Plain-English explanation and recommendation
  • SSL, headers, email security and technology summary
Run a free scan

What the scanner does not do

We think you should know the limits of any tool before you rely on it.

  • It does not log in, fill forms, guess passwords or attempt any attack.
  • It cannot see problems inside your admin panel, database or custom code.
  • A high score does not guarantee your website cannot be hacked.

For login areas, payment pages, customer data or APIs, ask for a manual security audit. Website owners and administrators who see our scanner in their logs can read about the Secuvexa scanner.