Website Security Report

25 real checks - certificates, security headers, cookies, exposed files, email authentication - scored out of 100. One payment, no account, no subscription.

Loading price…

Get your report

Payment is handled by Stripe. Your report is emailed the moment it's ready, usually within a minute, and stays at its own link for as long as you need it.

What's checked

  • HTTPS, HSTS and TLS configuration
  • Security headers - CSP, X-Frame-Options, nosniff
  • Cookie protection (Secure, HttpOnly, SameSite)
  • Exposed files - .env, .git, backups, directory listings
  • Email authentication - SPF and DMARC
  • Certificate strength and expiry
  • Mixed content and insecure subresources
  • A plain-English fix for every failed check

This is the same Advanced-depth audit engine our MSP customers run daily on client sites - the full 25 checks, not a cut-down version.