---
title: "Site Check: free website security check · Syba"
description: "Paste a website address for a plain-English security check of its certificate, headers, cookies and email records, with a fix prompt for an AI coding agent."
canonical: https://sybainsurance.com/site-check
---

# Check a website's security

Paste an address. Site Check reads what any visitor's browser and public DNS can see, scores it, and writes a fix prompt for an AI coding agent for every finding.

## Check this site

## What the check reads

- The TLS certificate: who issued it, when it expires and which protocol it speaks
- Whether plain HTTP redirects to HTTPS, and the HSTS header
- Content-Security-Policy, frame protection, X-Content-Type-Options, Referrer-Policy and Permissions-Policy
- Cookie flags, and headers that name a server version
- Scripts, styles and images the home page loads over plain HTTP
- SPF, DMARC, DKIM, MX and CAA records, and security.txt

### What a clean result means

Site Check looks only at what the public internet can see. It does not log in, submit forms, scan ports or crawl past the home page, so a clean result is a good sign, not a guarantee. Once you verify that you own a site, the dashboard also looks for files that must never be public, such as .env and .git.

## Plans for monitoring

Site Check plans, billed monthly in US dollars

Plan | Price | Sites | Checks

Free | $0 | 1 site | When you run them, with full history

Starter | $49 / month | 3 sites | Weekly, with the report sent to you

Business | $149 / month | 10 sites | Daily, with the report sent to you