Free tools to check your website
Each one answers one question in a few seconds. No account, nothing to install.
- SSL certificate checkerWhen does the certificate expire, who issued it, and do browsers trust it?
- SPF, DKIM and DMARC checkCan someone send email that looks like it came from your business?
- Security headers checkWhich protections does your homepage ask the browser for? Graded A to F.
- Cookies before consent checkDoes your site set cookies or load Google Analytics and Meta Pixel before anyone clicks accept?
Questions
Are these tools really free?
Yes. No account and no card. To keep them quick for everyone, one connection can run a few checks a minute.
How are they different from the full scan?
Each tool checks one thing. The full scan runs more than 20 checks in about 90 seconds, including WordPress plugins, files left on the server and forms, and explains the result in plain language with a brief for your developer. It is free too.
Can I check a site that is not mine?
Yes. The tools read only what any visitor or mail server can see: the certificate, public DNS records, and the headers and HTML of the homepage. They do not probe for weaknesses and send nothing unusual to the site.
Do you store the addresses I check?
We record which domain was checked with which tool, to see which tools people use. The result is kept in memory for 10 minutes so a repeat check is instant, and then dropped.
The full scan runs 20+ checks in about 90 seconds.
Free, no account. You get a plain-language report and a brief for your developer.
Go to the full scan