Website Health & Security Report
One check, one report: HTTPS and the certificate, security headers, cookies, backup and config files left where anyone can download them, WordPress exposure, email spoofing protection, domain expiry and speed. Graded, with what to fix first, and ready to print for a client or your web developer.
- 40+ checks
- Printable report
- About 20 seconds
What we check
- HTTPS: certificate expiry, http to https redirect, HTTP/2 and mixed content.
- Security headers and cookies: the six headers that matter, version leaks and cookie flags.
- Exposed files: Git folders, .env files, database dumps, backup zips, config backups, PHP info pages and folder listings, confirmed by their content so error pages aren't mistaken for leaks.
- WordPress: version leaks, XML-RPC and username discovery.
- Domain and email: SPF, DMARC, CAA, DNSSEC and when the domain expires.
Go deeper
- Full header analysis: HTTP Header Checker. Certificate and TLS versions: SSL Certificate Checker.
- Email security in detail: Email Security Checker.
- This is a quick external check, not a penetration test. It can't see inside the site, its admin area or the server.