Free website security scanner & SOC2 compliance auditor. Scans React, Next.js, and JavaScript-rendered sites. Enter any URL to test for vulnerabilities, missing security headers, SSL issues, and more.
Tests HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy
Validates HTTPS enforcement and transport layer security configuration
Detects server fingerprinting, sensitive paths in robots.txt, and technology leakage
Audits Secure, HttpOnly, and SameSite flags on all cookies
Checks for overly permissive cross-origin resource sharing configurations
Measures response time and identifies potential denial-of-service attack surfaces
Free tier includes 5 scans/hour with 2 recommendations per scan
Tools, apps & services โ all in one place