Free · no signup · 4 scans in one
Website Security Score
One URL in, one grade out. We scan your security headers, TLS certificate, email records
and reputation, then combine them into a single A+–F score with copy-paste fixes.
What makes a website secure?
No single control makes a site “secure”. Real security is layered: the browser must be told how to
behave, the connection must be encrypted and trusted, your domain must be protected from email
spoofing, and your site must not be flagged as malicious. A single letter grade rolls all four
layers into one number so you can see your true posture — and fix the weakest link first.
Security headers — 35%
CSP, HSTS, X-Content-Type-Options and friends are the browser’s instructions to defend against XSS, clickjacking and downgrade attacks. They are configuration, not code — the highest-leverage fix you can ship.
TLS / SSL certificate — 30%
The padlock. A valid, unexpired certificate on a modern protocol (TLS 1.2+) is what keeps traffic private and un-tampered. An expired or weak certificate breaks trust instantly.
Email security — 25%
SPF, DKIM and DMARC stop attackers sending mail that looks like it came from your domain. Missing records make phishing your customers trivial — even if your website itself is perfect.
Reputation — 10%
Threat feeds like Google Safe Browsing and mail blacklists decide whether browsers and inboxes trust you at all. A listing here can make your site unreachable overnight.
Frequently asked questions
It is a single composite grade (A+ to F) that combines several independent security checks — HTTP security headers, the TLS/SSL certificate, email anti-spoofing records (SPF, DKIM, DMARC) and threat-feed reputation — into one number so you can see your overall posture at a glance and know exactly what to fix first.
Each area is graded 0–100 and weighted by impact: security headers 35%, TLS/SSL 30%, email security 25% and reputation 10%. The weighted average maps to a letter grade. If an area cannot be assessed, its weight is re-distributed across the others so it neither helps nor hurts your score.
Yes — it is free, needs no signup and only scans public websites. CompleteStatus can also re-run this exact scan every day and alert you the moment your grade drops.
Don’t check it once — watch it 24/7
Your grade drifts every time you deploy — a dropped header, a lapsed certificate, a new DNS record. CompleteStatus runs this exact check around the clock and alerts you the moment something changes — before your users (or attackers) notice.
Monitor this free
Try the other free tools
Uptime is table stakes. We watch the rest — security headers, email authentication, certs and DNS, with the fix attached.
Start free
Product
Resources
Account
© 2026 CompleteStatus. All rights reserved.
CompleteStatus — operated in the United States
·
support@completestatus.com