Website Security Checker
A non-invasive look at your HTTPS/TLS setup, security headers, cookies and commonly exposed files, as part of one unified CheckSitePulse scan.
Scan your website
Free account, real checks, a prioritized fix list.
What the security check covers
HTTPS & TLS certificate
Certificate validity, expiry, hostname match, chain trust, the negotiated TLS version, and whether http:// redirects to https://.
Mixed content
Insecure http:// scripts, styles, frames and images loaded by https pages.
Security headers
Whether HSTS, Content-Security-Policy, X-Content-Type-Options, clickjacking protection, Referrer-Policy and Permissions-Policy are declared.
Cookies & exposed files
Secure, HttpOnly and SameSite flags on cookies your home page sets, plus 17 common paths such as .env and .git that should never be public.
Part of one unified scan
Security is one part of a CheckSitePulse scan — the same scan also covers SEO and speed, so you get one prioritized fix list instead of switching between tools.
What this does not measure: This is a configuration check, not a vulnerability or malware scan. It does not test for malware, SQL injection, XSS or outdated software, cannot prove that anything is safe, and reads cookies from your home page only.
Note: CheckSitePulse only inspects publicly available, non-intrusive signals (headers, certificate metadata, DNS records). It does not attempt to exploit or penetrate the sites it scans.
Need help fixing what the scan finds?
Run the check yourself, free. If you would rather have someone fix the issues for you, these services cover them.