Website Exposure Scanner
Check any site's real-world security posture in seconds: TLS and certificate health, security headers, email spoofing protection, exposed software and the CVEs that affect it. Free, no sign-up.
What gets checked
- TLS & certificate · protocols, expiry, trust, weak versions
- Security headers · HSTS, CSP, frame and MIME protections
- Email spoofing · SPF, DMARC, DKIM, MTA-STS
- Exposed software · server and app versions, matched to tracked CVEs
- Open ports & services (deep) · databases and admin panels reachable from the internet
- Sensitive files (deep) · exposed
.git,.env, backups and config