FREE DEFENDORIA SECURITY TOOL
Website Security Checker
Check the public security settings your website exposes. Inspect HTTPS, certificates, DNS and browser protections, then get evidence-based findings and practical next steps.
02 Public read-only checks
03 Evidence with guidance
Check a website
No account required Public configuration Read-only
ACTUAL SCAN RESULTS
Results for
Detailed findings
Expand a finding to review evidence and remediation guidance.
What we inspect
A quick look at the public security controls we check and why they matter.
Frequently asked questions
Is this a full website vulnerability scan?
No. It checks public DNS records and a certificate-verified HTTPS response, including selected security headers. It cannot detect every vulnerability or confirm that a website is secure.
Can a website pass these checks and still be vulnerable?
Yes. Configuration controls don’t determine whether applications, plugins, access permissions, or server components are vulnerable.
Which security headers do you check?
HSTS, Content Security Policy, X-Content-Type-Options, framing protections, and Referrer-Policy. The checker reports what is observed, not full policy effectiveness.
Do you store or share the results?
Recent results are cached temporarily on the server for efficiency. The checker does not require your email or account. Avoid entering domains you do not want checked by a public diagnostic service.
How can Defendoria help beyond this checker?
A scoped Website Security Audit can involve authorized investigation of your website’s applications, access controls, components and recovery readiness.
Methodology references: MDN HTTP headers · OWASP Secure Headers.