Check a website's security
Paste an address. Site Check reads what any visitor's browser and public DNS can see, scores it, and writes a fix prompt for an AI coding agent for every finding.
Check this site
What the check reads
The TLS certificate: who issued it, when it expires and which protocol it speaks
Whether plain HTTP redirects to HTTPS, and the HSTS header
Content-Security-Policy, frame protection, X-Content-Type-Options, Referrer-Policy and Permissions-Policy
Cookie flags, and headers that name a server version
Scripts, styles and images the home page loads over plain HTTP
SPF, DMARC, DKIM, MX and CAA records, and security.txt
What a clean result means
Site Check looks only at what the public internet can see. It does not log in, submit forms, scan ports or crawl past the home page, so a clean result is a good sign, not a guarantee. Once you verify that you own a site, the dashboard also looks for files that must never be public, such as .env and .git.
Plans for monitoring
| Plan | Price | Sites | Checks |
|---|---|---|---|
| Free | $0 | 1 site | When you run them, with full history |
| Starter | $49 / month | 3 sites | Weekly, with the report sent to you |
| Business | $149 / month | 10 sites | Daily, with the report sent to you |