Is the security scan really free?

Yes. You can scan as many websites as you want without an account and view the result online. A free email registration is only needed for the full PDF report and history.

What does the scan check?

SSL/TLS certificate, HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), DMARC, SPF and DKIM, DNS records including CAA and DNSSEC, cookie flags and tracker detection, CMS / framework detection with CVE matching, port scan and Whois/RDAP.

Is the scan GDPR-compliant?

Yes. All checks only access publicly visible information of your website. No personal data of your visitors is collected. Server location: Germany (Hetzner).

How long does a scan take?

Usually 10 to 20 seconds. Complex domains with many subdomains or slow DNS servers can take up to 60 seconds.

May I scan websites I do not own?

You may only scan domains you are authorized to scan (e.g. your own website, your company's website, or with permission from the owner). The scan only accesses publicly visible information that any visitor could see — it is technically passive.

Security Intelligence Engine · Online

See what
attackers see.

Full website security audit in 15 seconds. SSL, HTTP headers, DNS, open ports, e-mail protection — all in one report.

free · no account required · result in ~15 sec

Live scan demo

Simulation · no real data

What we check

14 categories — one report

Every scan covers SSL/TLS, HTTP security headers, DNS records, e-mail authentication, open ports, cookies, GDPR pitfalls, performance and known CVEs in detected CMS versions.

🔒

SSL / TLS

Certificate, expiry, ciphers, protocols

🛡

HTTP headers

HSTS, CSP, X-Frame-Options, etc.

📧

DMARC · SPF · DKIM

E-mail spoofing protection

🌐

DNS records

A, AAAA, MX, TXT, NS, CAA