Security Checker

Enter a URL and get an advisory review of its security configuration: security headers, cookie flags, TLS facts, redirect-chain downgrades and information disclosure — in plain language.

What this checks

The checker fetches the URL once (like any visitor would) and reviews the response: HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP, cookie flags, observable TLS facts, insecure redirect hops, and Server/X-Powered-By disclosure.

What this does not do

This is a passive configuration review, not a penetration test: nothing is probed, injected or forced, no vulnerability assertions are made, and no letter grades are issued. The reviewed site is fetched exactly once, like any visitor.

How to use

Paste a URL and press Check. Each finding shows a state (passed / warning / failed / info), a severity marker, and a plain-language recommendation. Instant, no account, nothing stored.

Related tools