Free · no signup · 4 scans in one
Website Security Score
One URL in, one grade out. We scan your security headers, TLS certificate, email records and reputation, then combine them into a single A+–F score with copy-paste fixes.
What makes a website secure?
No single control makes a site “secure”. Real security is layered: the browser must be told how to behave, the connection must be encrypted and trusted, your domain must be protected from email spoofing, and your site must not be flagged as malicious. A single letter grade rolls all four layers into one number so you can see your true posture — and fix the weakest link first.
Security headers — 35%
CSP, HSTS, X-Content-Type-Options and friends are the browser’s instructions to defend against XSS, clickjacking and downgrade attacks. They are configuration, not code — the highest-leverage fix you can ship.
TLS / SSL certificate — 30%
The padlock. A valid, unexpired certificate on a modern protocol (TLS 1.2+) is what keeps traffic private and un-tampered. An expired or weak certificate breaks trust instantly.
Email security — 25%
SPF, DKIM and DMARC stop attackers sending mail that looks like it came from your domain. Missing records make phishing your customers trivial — even if your website itself is perfect.
Reputation — 10%
Threat feeds like Google Safe Browsing and mail blacklists decide whether browsers and inboxes trust you at all. A listing here can make your site unreachable overnight.