What we check
What every scan checks.One checklist, explained.
One credit checks one website against the areas below, from the outside, with evidence and a fix for each finding.
Exposed files: once your domain is verified.
The checklist · 10 areas
Every area, one report.Pick one to see what it covers.
Each page shows what we look at, why it helps, a sample finding and how to fix it.
- 8 checks Security headers HSTS, CSP and the other browser protections your site turns on. Did you know? Security headers are short lines your server sends that tell browsers how to protect your visitors.
- 8 checks Email security SPF, DKIM and DMARC: can others send email as you? Did you know? A domain that sends no email still needs SPF and DMARC: two records tell receivers to refuse mail sent in its name.
- 7 checks HTTPS and HSTS Every visit lands on a secure connection, and stays there. Did you know? With HSTS, every return visit goes straight to an encrypted connection, even when someone types http://.
- 5 checks DNS health DNSSEC, CAA, name servers and forgotten records. Did you know? An old record that points at a service you no longer use is closed for good by deleting it.
- 6 checks Outdated software Old versions, plugins and known vulnerabilities in what we find. Did you know? A known vulnerability doesn't mean a site has been hacked. Updating to a fixed version closes it.
- 6 checks Exposed keys Secret keys and internal details left in public code. Did you know? Some keys, like a Stripe publishable key, are made to be public. Only secret ones need action.
- Verified sites · 5 checks Exposed files Sensitive files left online by mistake. Did you know? A forgotten settings file is closed by deleting it, blocking hidden files, and changing the passwords it held.
- 5 checks Google blocklist status Google's malware and phishing lists, and signs of injected content. Did you know? Chrome, Safari and Firefox use Google's lists to decide which sites get a full-page warning.
- 2 checks Security contact A security.txt file, so problems reach the right person. Did you know? security.txt is a standard (RFC 9116): one small file that tells people how to reach you about a problem.
- 4 checks Cookie security Secure, HttpOnly and SameSite on the cookies you set. Did you know? Secure, HttpOnly and SameSite are usually one setting in your platform, and they keep sign-in cookies private.
- In every scan
That's the whole checklist.9 areas in every scan, plus exposed files for verified sites.
Each area gets a result, and areas with nothing to fix are listed as good.
See a sample report
Do I choose which checks run?
No need. Every Quick Scan runs these checks on one website, for one credit, and the report covers each area. Exposed files is added once your domain is verified.
Do I need to install anything or change my site?
Nothing to install and nothing to change. A Quick Scan reads what your site and domain already show the internet, with light, read-only checks.
What do I get for each check?
A plain-English finding with how much it matters, how confident we are, the evidence we saw, the fix and roughly how long it takes. Areas with nothing to fix are listed as good.
What sits outside a Quick Scan?
Every report prints its scope. A Quick Scan stays on the public surface: your homepage, the files it loads and your domain's public records. Logins and other pages sit outside it.
Next
See it in a report.Then check your own site.
- Sample report A full report in the real format, for example.com.
- How it works From a website address to a report you can act on.
- Pricing $8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax), no subscription.
Also useful: For small businesses For web agencies For developers Website security check
See what your website shows.Know what to fix first.
See pricing- HTTPS and redirects
- Encryption (TLS) test
- Security headers
- Email security
- Outdated software and plugins
- Known vulnerabilities
- Cookie security
- Google blocklist
- Exposed keys
- Exposed files (verified sites)
- DNS health
One report, a fix for every finding