Security Report
example.com
A
Security Grade
Full Security Stack
We scan every layer — from transport security to DNS configuration to content vulnerabilities. Issues graded from critical to low.
SSL/TLS Certificate
Check certificate validity, issuer, expiry date, TLS protocol version, key strength, and HSTS enforcement. Graded A+ through F.
10 Security Headers
Validate HSTS, CSP, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, Permissions-Policy, COOP, CORP, and COEP.
Email Authentication
Verify SPF, DKIM, and DMARC records. Check SPF validity, DKIM selectors, and DMARC policy (none, quarantine, reject) with an email security score.
DNS Security
Check DNSSEC validation, CAA records, nameservers, MX records, plus A, AAAA, CNAME, and TXT record analysis via Google and Cloudflare DNS.
Content Vulnerabilities
Scan for exposed emails and phone numbers, inline and external scripts, outdated JavaScript libraries, and mixed content issues.
Cookie Security
Analyze cookies for Secure, HttpOnly, and SameSite flags. Count total cookies and identify those missing security attributes.
What We Check
Comprehensive security testing across all critical areas. Each finding includes severity, impact, and fix instructions.
HTTPS & SSL
- HTTPS enabled and redirects
- Certificate validity and expiry
- TLS protocol version (1.2+)
- Key strength and cipher analysis
- HSTS header enforcement
- Mixed content detection
Security Headers
- Strict-Transport-Security (HSTS)
- Content-Security-Policy (CSP)
- X-Content-Type-Options
- X-Frame-Options
- Referrer-Policy
- Permissions-Policy
DNS & Email
- DNSSEC validation
- CAA record presence
- SPF record and validity
- DKIM configuration
- DMARC policy enforcement
- MX record analysis
Content & Cookies
- Exposed email addresses
- Exposed phone numbers
- Inline and external script count
- Outdated JavaScript libraries
- Cookie Secure flag
- Cookie HttpOnly and SameSite flags