Free security grade · no sign-up
Is your website secure?
Get a free security grade in seconds: HTTPS, security headers, cookies and email spoofing protection, with plain-language fixes.
The free check only reads what any visitor's browser sees. Deeper checks run only on websites whose owners have verified them.
What we check
Six areas attackers look at first, graded A to F.
HTTPS & certificate
A valid certificate that isn't about to expire, a forced HTTPS redirect, HSTS and no mixed content.
Security headers
The browser protections that stop clickjacking, content sniffing and injected scripts.
Cookies
Session cookies marked Secure, HttpOnly and SameSite so they can't be stolen or replayed.
Email spoofing protection
SPF, DMARC and MTA-STS, so nobody can send convincing email in your name.
DNS & domain
DNSSEC, CAA records and domain expiry, so your name can't be hijacked or lapse.
Exposure & software
Leaked files, outdated JavaScript and WordPress versions, and blocklist listings.
Beyond the grade
Continuous security for the websites you run.
Inside your WordPress
A small plugin looks for changed files, malware and unexpected administrators from inside the site.
AI security review
Claude reads everything we know about your site, from checks to plugin versions, and writes a prioritized plan in plain language. It never touches your site.
Alerts that explain the fix
When a grade drops, a new problem appears or a certificate is about to expire, you hear what changed and how to fix it.