Check your website’s health for free, 18 checks
Type in your website address and wait about 20 seconds. You will see what your site leaves open to outsiders, where it is so slow that customers close it and leave, and where it is missing chances to be found in search. No signup, and no password of any kind.
Outside-only check. Nothing is touched on your system and no password is needed · 6 scans per hour
What this check does, and what it does not do
Checked from outside, without touching your system
- Encryption and the security certificate, including its expiry date
- Security headers that block injected scripts and stop your pages being framed
- Cookie settings that could be stolen and used to take over a login
- Response time and page size, which tie straight to the sales you lose
- Mobile basics and being found on Google
Not done on purpose
- No guessing at secret file paths, such as config files or backup files
- No test commands fired at your system, no break-in attempts, no login attempts
- Nothing behind a login page is checked
- Nothing about your site is kept. When the check is done, that is the end of it
Why it holds back this much. Because guessing at file paths, or firing test commands at a site without written permission, is a line that honest security people do not cross. I only do deeper checks after you hire me and sign your permission, and that is where the most expensive problems usually turn up.
Questions people ask before running it
What does this free website check look at?
18 checks across 8 areas: whether HTTPS is enforced and when the certificate expires, four security headers, whether your site can be shown inside another site, software version disclosure, cookie settings, files loaded without encryption, server response time and page size, and the basics for mobile and for being found. Every finding is graded high, medium or low and explains what it means for your business.
Do I need to sign up or give a password?
Neither. No email, nothing to install, and no password or access to your systems. The check looks at your site from the outside, exactly the way an ordinary visitor sees it.
How long does it take?
About 20 seconds. The checks run one after another and the results appear on the same page. There is no email to wait for and nothing to come back to later.
Can I check someone else's website?
No. It has to be a site you own, or one the owner has given you permission to check. Checking someone else's site without permission is a legal problem in many countries, including Thailand, and it is not what this tool was built for.
How is the free check different from a full audit?
An outside check can only see what your server announces about itself. A full audit tests things that require hands on the system: whether your forms accept database injection, whether your search box can be scripted, and whether pages behind login separate one user's data from another's. That work only happens with written authorisation from the system owner.
Do you keep data about the site I checked?
No. When the check is done, that is the end of it. The results are not saved in the system and are not passed on to anyone. If you want me to look at your results too, you have to send them to me yourself.