Free Website Tools
Website security and performance tools
Run focused checks for website security, SSL, DNS, redirects, WordPress, HTTP headers and response performance.
Website Security Scanner
Scan a website for SSL, security headers, cookies, CSP, CORS, mixed content, configuration issues and common security weaknesses.
Website Performance Test
Measure website DNS time, connection time, TLS handshake, TTFB, total response time, compression and response size.
SSL Checker
Check a website SSL certificate, validation status, expiry date, signature type and remaining certificate lifetime.
Security Headers Checker
Check website HTTP security headers including HSTS, CSP, X-Content-Type-Options, frame protection and Referrer-Policy.
CSP Checker
Check whether a website returns a Content-Security-Policy header and identify missing CSP protection.
CORS Checker
Inspect publicly visible CORS response behavior and identify broad wildcard Access-Control-Allow-Origin configuration.
Cookie Security Checker
Check publicly returned website cookies for Secure, HttpOnly and SameSite security attributes.
Mixed Content Checker
Check HTTPS pages for insecure HTTP resource references that may create mixed-content security warnings.
DNS Security Checker
Inspect publicly available A, AAAA, MX, NS, TXT and CAA DNS records for a website hostname.
Redirect Checker
Follow and inspect safe HTTP and HTTPS redirect chains for a website URL.
Technology Detector
Detect publicly visible website technology signals including server software, WordPress, WooCommerce, Shopify and frameworks.
WordPress Security Checker
Detect WordPress and review externally visible website security signals before running an optional verified-owner deep scan.
Website Response Time Test
Measure DNS, TCP connection, TLS, time to first byte and total website response time.
URL Safety Scanner
Analyze a public URL for suspicious URL characteristics, page signals, iframes, forms and external scripts.
Robots.txt Checker
Check whether a website publishes a robots.txt file and inspect its HTTP availability.
Security.txt Checker
Check whether a website publishes a security.txt disclosure policy under the standard well-known path.