Enter a website address. In a few seconds we check availability, the SSL certificate, the platform and its version, known WordPress vulnerabilities, security headers, email protection and suspicious code. No sign-up.
Free website scanner
The scanner only fetches the homepage and DNS records — like any visitor would. It does not look for hidden files or log in anywhere.
What the scanner checks
- Availability and speed — the response code and homepage load time.
- SSL certificate — whether it is valid and when it expires.
- Platform — WordPress, WooCommerce, PrestaShop, WHMCS, Magento or Shopify.
- WordPress — whether the version is current and how many known vulnerabilities (CVE) it has.
- Security headers — HSTS, CSP, X-Frame-Options and three more.
- Email protection — SPF and DMARC records.
- Suspicious code — malicious code patterns and PHP errors on the homepage.
Full monitoring does the same every few minutes and adds checks we do not run against other people's sites without an account. See what we check for WordPress, PrestaShop, WHMCS, Magento and Shopify.