All features.
Free.

What Webscan Radar checks

A full website security audit typically takes 10 to 30 seconds. In that time we examine five independent security areas and produce a report with concrete recommendations — understandable even for non-technical readers. For every finding the report includes: severity, impact, remediation steps, effort and estimated cost.

The SSL/TLS analysis checks the certificate, issuer, remaining validity, TLS versions in use, cipher suites and whether the certificate matches the domain. The HTTP security header check uncovers missing or misconfigured HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy headers — the main entry points for XSS and clickjacking.

The DNS and infrastructure analysis identifies the hosting provider, server IP, location, open ports and exposed subdomains. The e-mail security check examines SPF, DMARC and DKIM records plus the MX configuration for spoofing protection. The GDPR audit detects cookie consent issues, Google Fonts embeds, analytics without anonymisation, tracking pixels and missing privacy policy links.

On top of that, we detect the CMS in use (WordPress, Joomla, TYPO3, Shopware, Drupal, Magento, PrestaShop and many more) and compare the installed version with the current release and known CVEs.