Check a website before you trust it.
Enter any public website address to check reputation signals, availability, HTTPS, redirects and important browser-security headers. No account or plan required.
Scanning website
Website report
Security posture
Findings and recommended fixes
Prioritised from the public signals detected during this scan.
Recent website scans.
Signed-in scans are stored securely in Supabase and are visible only to your account.
A useful first look—not security theatre.
The scanner focuses on clear, externally observable signals and explains exactly what each result means.
Known flags
Checks SecureFlowGroup’s reviewed flag list, with an optional Google Safe Browsing provider hook.
HTTPS and redirects
Confirms whether the final address is encrypted and whether HTTP visitors are redirected safely.
Security headers
Reviews CSP, HSTS, framing protection, MIME protection, privacy and permissions headers.
Availability
Checks public DNS, response status, redirects and the final address without intrusive probing.
Clear remediation
Turns technical signals into prioritised, readable actions for owners and developers.
Account history
Signed-in scans are stored under row-level security so each client sees only their own results.