Free tool

Security Scan

Enter a domain. Get a graded report on its TLS configuration, certificate, security headers and email security - in seconds, free, no account needed.

Checks to run

Turn a check off if it isn't relevant to this target, or if it isn't working for you.

Results are published at a stable URL by default - uncheck the box above to keep yours private. See our grading methodology.

What gets checked

TLS & Certificate

Protocol support (including whether deprecated TLS 1.0/1.1 still work), cipher strength, forward secrecy, and the full certificate chain.

Security Headers

Content-Security-Policy, HSTS, X-Frame-Options and the rest of the headers a browser uses to contain what a page can do.

Email

STARTTLS on the domain's mail servers, plus SPF and DMARC - the difference between anyone being able to spoof your domain and no one being able to.