Black Friday in 15 days: will your customers be able to pay? 25% off the first year and free setup, until 30 NovemberSee the offer →
Free tool
Enter a page address. The tool reads six security headers, including HSTS, CSP and X-Frame-Options, and gives a grade from A to F.
The grade starts at 100. Each missing header removes points. HSTS and CSP weigh the most. A page served over http gets an F.
No. Headers are only one layer of protection. The tool does not test the site’s code, its plugins or its passwords.
In the configuration of the server, the CDN or a security plugin of the CMS. Test the page after each change: a CSP that is too strict can block scripts.
When the certificate and the domain expire, before the site goes down.
Open →Do the site's emails land in spam? SPF and DMARC read in one click.
Open →Every hop from an address to the final page, loops included.
Open →The links on a page that lead nowhere anymore.
Open →The A, AAAA, CNAME, MX, NS and TXT records of a domain, in one lookup.
Open →One check from Europe, right now: HTTP status and response time.
Open →Ten sites at once: certificate, domain, SPF and DMARC, as CSV.
Open →WordPress, PrestaShop or Magento checkouts replayed on each release.
Open →A page's response time, certificate, broken links and security headers.
Open →The monitoring clause to paste into your maintenance contract.
Open →What monitoring earns you if you bill it to your clients.
Open →What an hour of downtime costs a shop, in figures for your client.
Open →What 99.9% means in minutes of downtime per month and per year.
Open →A PDF preview of the monthly report, in your name, to show a client.
Open →