Free passive security check

How exposed is your website?

Enter a domain and in about 20 seconds we check what anyone on the internet can already see: certificates, security headers, the technologies you run and their known CVEs, email spoofing protection, DNS and forgotten subdomains.

Passive only: we read public data and load a few public pages, like a normal visitor. No intrusive tests.

Full assessment

This is only what is visible from outside.

A passive check can't see outdated plugins, injection flaws, broken access control or exposed admin panels. Our engineers test those, with your written authorisation, and send a prioritised report within 24 hours.

  1. 01Port and service scan of every host in scope
  2. 02Automated and manual web vulnerability testing
  3. 03Verified findings only, no scanner noise
  4. 04Fix plan ordered by risk, mapped to NIS2 and ISO 27001