Free tool

How healthy is your website?

Enter your site address. We check HTTPS, the SSL certificate, security headers, speed, SEO basics and, for WordPress, the version and common exposures.

Questions

What is checked?

Whether the site opens over HTTPS and redirects from HTTP, the SSL certificate and its expiry date, six security headers, server response time and compression, title, description and mobile viewport, and for WordPress sites the version, the public user list and xmlrpc.php.

Is it safe for my site?

Yes. We load the home page and a few public addresses, like a normal visitor would. Nothing is changed and no passwords are tried.

Why is the speed different from PageSpeed Insights?

We measure how fast the server returns the HTML from our server, not how fast the full page renders in a browser. Both matter.

Is this a full security audit?

No. It is a quick external check. Plugins, backups and server settings need access, which we review in the paid onboarding.