Free website scan

A free website security check for your business.

Enter your domain and we check the public side of your website. You get a score and a clear list of fixes.

001 What it checks

Six checks that show how attackers see your website.

Each check looks at something a visitor, a browser or a mail server can already see. Nothing behind your login is touched.

TLS and HTTPS

We check that your site serves a valid certificate, sends visitors to HTTPS and uses current TLS versions.

Security headers

We check the headers that tell browsers how to protect your visitors, such as HSTS and the content security policy.

Email and domain records

We check SPF, DKIM and DMARC. These records make it harder for attackers to send email that looks like it came from your domain.

Tracking pixels and third party scripts

We list the trackers and outside scripts that load on your pages, so you know what each visitor's browser runs.

Exposed software versions

We check whether your site shows the exact version of its software, which helps attackers pick known weaknesses.

Cookies and consent

We check which cookies your site sets before a visitor agrees. We also check whether your consent banner matches what loads.

002 What you get

A score and a list of fixes you can act on.

The scan rates each check and adds them into one score. Every failed check comes with a plain fix that your developer or host can make.

One score

A single number that everyone in the business can read, from the owner to the developer.

A list of fixes

Each gap comes with the steps to close it, with the most urgent fixes at the top.

A brief for your developer

Send the list to whoever runs your website. Fix the urgent items first, then check again.

003 Free and public

The scan is free and reads only public information.

It costs nothing and needs no access to your systems. It reads what any visitor or search engine can already see on your website.

004 Questions

Website security check questions

Is the website security check free?

Yes. The scan is free. Enter your domain to see your score and the list of fixes.

What data does the scan read?

Only public information. The scan reads what any visitor, browser or mail server can see, such as your pages, headers, DNS records and public scripts. It does not read your files or your customer data.

Does the scan change anything on my site?

No. The scan only reads. It does not install code, change settings or send anything into your site.

Start with your website today.

Enter your domain and see where your website stands. The scan opens in the Oncrypt app.

Talk to us