Security Check
Website Security Check
Enter your website address. In about 30 seconds you will see what a visitor or an attacker can tell about your site from the outside, graded A to E.
Before you start
- Only check websites you own or are authorized to check.
- The check is passive: it loads a few public pages and DNS records, the same way a browser does. It never attempts logins, brute force, or exploits.
- The result is a quick indicator and does not guarantee the absence of vulnerabilities.
- The URL and result are stored so that we can prepare the detailed report and improve the tool.
Result
Score 0 / 100
- 0 Fix
- 0 Attention
- 0 OK
Want to know what to do, in what order?
Enter your name and email and we will prepare a detailed report written for business owners: what each finding means for your business, concrete fixes, and a 3-month plan. The report is generated by AI (Claude) from this result and reviewed guidance, and sent to your email. Free of charge.
Preparing your report. This usually takes 30–90 seconds. We will also send it to your email.
Your detailed report
The same report, with the PDF attached, has been sent to your email.
We could not generate the report right now. We have your request and will send the report by email.
What is checked
- HTTPS, redirect from http, certificate expiry, legacy TLS
- Security headers (HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy)
- Server / PHP version disclosure and end-of-life PHP
- WordPress: version, readme.html, xmlrpc.php, user enumeration, login page
- Mixed content, insecure form actions, external scripts, cookie flags
- Email spoofing protection: SPF and DMARC
FAQ
Is it safe to run this on my site?
Yes. The tool only reads what is already public, with a handful of normal requests. It does not change anything on your site.
Why is my score low even though nothing bad has happened?
Most findings are missing protections, not evidence of a breach. They are cheap to fix and reduce the chance and impact of an incident.
Can Esolab fix these for us?
Yes. We handle header configuration, WordPress hardening, migration off end-of-life PHP, and SPF / DMARC setup. The first consultation is free.