Free Website Scanner: check your site for security problems
Enter your website and your email. We look at your site the way an attacker sees it from outside: SSL, HTTPS, security headers, cookies, exposed software versions and WordPress plugins. Then we email you the report.
- Free, no account needed
- 8 checks from outside
- Report sent by email
Need help reading your report? Contact us
What the free scan checks
Each check reads your website like a visitor’s browser would. Nothing is changed on your site.
| Check | What it tells you |
|---|---|
| Uptime & speed | Whether your site answers visitors, and how quickly. |
| HTTPS redirect | Whether visitors are always moved to the encrypted version of your site. |
| SSL certificate | Whether your certificate is valid, trusted and close to expiring. See how to install an SSL certificate. |
| Security headers | The instructions your server sends to protect visitors’ browsers, for example against clickjacking. |
| Cookie safety | Whether the cookies you set can be stolen or read by scripts. |
| Exposed info | What your server reveals about the software it runs, such as version numbers or open folder listings. |
| Tech detection | The platforms and libraries anyone can see from outside. |
| WordPress check | Your WordPress version, usernames that are exposed, and plugins with known vulnerabilities. Read how to secure a WordPress website. |
What an automatic scan can’t see
A scan from outside finds settings that are wrong. It doesn’t log in, and it can’t judge how your website’s own features behave.
Problems behind a login
Customer accounts, admin pages and order history are out of reach for a scanner that isn’t signed in.
Flaws in your own code
A customer who can see someone else’s order, or a discount code that works forever, looks perfectly normal to a scanner.
Malware already inside
This scan doesn’t read the files on your server. If you think your site is hacked, read how to restore a hacked website.
Found weaknesses? Here’s what to do next
The test finds the holes, and the firewall blocks attacks while you fix them.
Website Firewall
Runs in front of your website, on your own server, and stops hacking attempts, scanners and password guessing before they reach it. It also checks your server for weak settings.
30 days free, then $20 a month per website. No card needed.
Penetration Test
A security expert tests your website by hand, including the parts behind a login, and shows you how to fix what they found.
One fixed price, and you pay only if we find a real problem.
Questions
Is the website scanner really free?
Yes. The 8 checks listed above are free and need no account. You only give an email address so we can send you the report.
Can the scan slow down or break my website?
No. The free checks read your website the way a visitor’s browser does. Nothing is changed on your site.
Can I scan a website I don’t own?
No. Only scan websites you own or have written permission to test. Scanning someone else’s website without permission is not allowed.
Does the scanner find malware?
No. It checks how your website is set up from outside; it doesn’t read the files on your server. If your site shows strange pages, redirects or a Google warning, read how to restore a hacked website.
How often should I scan my website?
After every big change, such as a new theme, new plugins or a move to a new server, and at least once a month. A firewall watches your website every day in between.
What is the difference between a scan and a penetration test?
A scan checks settings automatically, from outside. In a penetration test a security expert attacks your website by hand, logs in like a real user and tests how its features can be abused, which no scanner can do.