Free security check

How secure is your website, really?

Enter your address and get an instant, plain-English security grade. No jargon, no signup to see your result, and every problem comes with the fix.

Run a security check

This check only looks at settings your website already shows publicly, the same things any visitor's browser can see. It does not attempt to log in or break anything. Results are shown to you on screen straight away.

What we check

Four things that quietly matter

Secure connection

Whether your site loads over HTTPS and sends insecure visitors to the secure version.

Security headers

The behind-the-scenes settings that stop scripts, clickjacking and content-sniffing attacks.

Email anti-spoofing

Whether SPF and DMARC stop criminals sending invoices that look like they came from you.

Information leaks

Whether your site quietly advertises the software and versions it runs on.

Questions

Good to know

Is this safe to run on my site?
Yes. The check only reads settings your website already shows to every visitor's browser, plus public DNS records. It never tries to log in, guess passwords, or change anything.
Should I only check my own site?
Yes. Please only run the check on a domain you own or are authorised to check. That is what the confirmation box is for.
What do the grades mean?
Each area gets a traffic-light rating and a grade from A to F. Green is good, amber could be better, and red needs attention. Every red or amber item comes with a plain-English fix.
Can you fix the problems it finds?
Yes. I fix all of these as part of a new build or a one-off security hardening pass. Run the check, then click through to see what sorting your specific issues would cost.