Free website security check

Check your website’s security in under a minute.

A free, instant scan of your site’s HTTPS setup, SSL certificate, security headers and email authentication. Clear results in plain English, no account needed.

Website Health & Security Checker

Enter a domain and we will read what its public configuration says about HTTPS, its certificate, a few response headers and its email records. Free, with no account.

A public domain, for example example.com. Standard web ports only.

These are configuration checks against publicly available information. They do not detect malware, test for vulnerabilities or constitute a penetration test, and a clean result is not a guarantee that a website is safe.

What the free security check looks at

Every finding is explained in plain English, with a clear next step for anything that needs attention.

HTTPS and redirects

Confirms your site loads over an encrypted connection and that visitors on plain http:// are sent to the secure version.

SSL/TLS certificate

Verifies the certificate against trusted authorities and flags it if it has expired or runs out within two weeks.

Security headers

Checks HSTS, Content-Security-Policy, X-Content-Type-Options, clickjacking protection and Referrer-Policy.

Email authentication

Looks up your SPF, DMARC and MX records, the DNS settings that stop other people sending email as your domain.


Free tools for the numbers, too

Quick calculators for freelancers and small businesses. They run entirely in your browser, and nothing you type is sent anywhere.


Need more than a free check?

Paid help from the team behind Earnox Secure.

Guides and explainers

Plain-English write-ups on website security checks, VAT, invoicing and pricing.