Website security check: HTTPS, SSL and headers
Check that your whole site runs on HTTPS, that the certificate isn’t about to expire and that the security headers are in place.
Free 20-page scan · No sign-upAn expired certificate scares your visitors away
The browser shows a “not secure” warning and hardly anyone gets past it. We check the security basics on every page and warn you before it expires.
What we check
Across every page, on mobile and desktop.
Across every page, on mobile and desktop.
- HTTPSWhether every page loads over HTTPS, with no exceptions.
- Mixed contentImages or scripts still served over HTTP.
- SSL certificateValidity, domain covered and days until it expires.
- Security headersContent-Security-Policy, HSTS and other recommended headers.
- CookiesSession cookies with no SameSite or no Secure.
- Outdated librariesWe read the version of the JavaScript libraries your page loads and check it against public vulnerability lists.
How it shows up in your report
Every issue with its exact location, why it matters and how to fix it.
FAQ
Do you run penetration tests?
No. We check the configuration visible from the outside; we don’t attack your site, we don’t analyze your code and we don’t test whether an issue is exploitable on your setup.
Will you warn me before the SSL expires?
Yes, on every plan: we check the certificate daily and warn you when 14 days are left, then again when 3 are left.
Does it affect SEO?
Yes: HTTPS is a ranking signal and mixed content triggers browser warnings.
Which plans include it?
All of them.
Try it on your own site
We’ll scan 20 pages free in under two minutes — no sign-up.
- ✓ Nothing to install
- ✓ Mobile & desktop
- ✓ 14-day money-back guarantee