Free tools to check your website
Each one answers one question in a few seconds. No account, nothing to install.
- SSL certificate checkerWhen does the certificate expire, who issued it, and do browsers trust it?
- SPF, DKIM and DMARC checkCan someone send email that looks like it came from your business?
- Security headers checkWhich protections does your homepage ask the browser for? Graded A to F.
- Cookies before consent checkDoes your site set cookies or load Google Analytics and Meta Pixel before anyone clicks accept?
Questions
Are these tools really free?
Yes. No account and no card. To keep them quick for everyone, one connection can run a few checks a minute.
How are they different from the full scan?
Each tool checks one thing. The full scan runs more than 20 checks in about 90 seconds, including WordPress plugins, files left on the server and forms, and explains the result in plain language with a brief for your developer. It is free too.
Can I check a site that is not mine?
These four tools look at what a site shows to every visitor, so you can use them to look at any public site. A full check from an account is different: order it only for a site that is yours or that its owner allowed you to check.
Do you store the addresses I check?
We record which domain was checked with which tool, to see which tools people use. The result is kept in memory for 10 minutes so a repeat check is instant, and then dropped.
The full scan runs 20+ checks in about 90 seconds.
Free, no account. You get a plain-language report and a brief for your developer.
Go to the full scan