All tools · 30 seconds
Is your website as safe as it looks?
Type in a domain. I look at what any visitor can already see: the certificate, the security headers and the email records. You get a red, amber or green back, with a list of what to fix. It takes under a minute.
What it did
One request for your front page over HTTPS, one over plain HTTP, the certificate handshake and a handful of DNS lookups. The same things a browser or a mail server does every day. It does not scan ports and it does not try to log in. I keep a log line with the domain and the colour, nothing about you.
What this does not tell you
It does not look at open ports, the software running behind the site, your logins or your code. A green here says the front door is shut, not that nothing inside is wrong. That is what a proper audit is for.
