LIVE FEED

Website Exposure Scanner

Check any site's real-world security posture in seconds: TLS and certificate health, security headers, email spoofing protection, exposed software and the CVEs that affect it. Free, no sign-up.

Surface scans are passive and safe to run on any public site. Deep scans actively probe ports and paths, so you must confirm you are authorized to test the target before one runs.

What gets checked

  • TLS & certificate · protocols, expiry, trust, weak versions
  • Security headers · HSTS, CSP, frame and MIME protections
  • Email spoofing · SPF, DMARC, DKIM, MTA-STS
  • Exposed software · server and app versions, matched to tracked CVEs
  • Open ports & services (deep) · databases and admin panels reachable from the internet
  • Sensitive files (deep) · exposed .git, .env, backups and config
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed