Website Security

Website Security Tools

Review public website-facing and domain-facing signals such as domain intelligence, response headers, security headers, robots.txt crawler directives, XML sitemaps, canonical/noindex tags, AI crawler access rules, llms.txt hints, meta title and description tags, heading structure, Open Graph metadata, structured data, SSL certificate records, redirect chains, DNS, and certificate-authority DNS policy. Start with Domain Intelligence or the combined Domain Security Scan, then open focused tools when a signal needs review.

Domain Intelligence Report

Run DNS inventory, RDAP-safe registration context, IP/ASN hints, PTR, CAA, DNSSEC, TXT summaries, and provider hints together.

Website Exposure Scanner

Run HTTPS, redirects, security headers, HSTS, DNS records, IPv6, mixed content, and basic CDN/origin signals together.

AI/Search Visibility Scanner

Check robots.txt, noindex, canonical, sitemap, server-rendered content, llms.txt, and AI crawler access signals.

Domain Security Scan

Run SSL, headers, CAA, SPF, DMARC, robots.txt, sitemap, canonical, Open Graph, and schema checks together.

HTTP Headers Checker

View selected response headers for one public URL.

Security Headers Checker

Check common security-related header presence.

Redirect Checker

Follow a limited redirect chain with status codes.

HTTP Latency Test

Measure constrained HTTP request timing.

SSL Certificate Checker

Review certificate transparency issuer, expiry, SAN, and match signals.

Robots.txt Checker

Parse crawler directives, sitemap declarations, and common SEO signals.

Sitemap Checker

Validate XML sitemap structure, sampled child sitemaps, and URL signals.

Canonical / Noindex Checker

Inspect canonical tags, meta robots, and X-Robots-Tag headers for one public URL.

Meta Title / Description Checker

Inspect title tags, meta descriptions, duplicate metadata, and snippet preview signals.

HTML Heading / Content Structure Checker

Inspect heading hierarchy, skipped levels, duplicates, and content structure signals.

Open Graph / Social Preview Checker

Inspect social preview metadata, Twitter/X Card fields, and preview conflicts for one public URL.

Structured Data / JSON-LD Validator

Check JSON-LD blocks, schema.org types, malformed structured data, and basic schema findings for one public URL.

CAA Lookup

Check certificate authority DNS policy records.

DNS Lookup

Review public DNS records for a domain.

WHOIS / RDAP Lookup

Review public registry context for domains, IP addresses, and ASNs.

Safe by design

URL tools check one public URL, block private/internal targets, use short timeouts, and avoid response-body proxying. They are built for diagnostics, not scanning.

FAQ

Are these vulnerability scanners?

No. They check selected public signals only.

Can I scan internal hosts?

No. Internal and private targets are blocked.

Why no port scanner?

Port scanning carries higher abuse risk and remains deferred.

Check my website/domain

What this checks

Public DNS, HTTP, HTTPS, certificate, redirect, header, IP/ASN, or domain configuration signals.

Limits

What this cannot check

It cannot perform credentialed vulnerability testing, scan private hosts, bypass access controls, or certify complete security.

Read results

How to use the output

Treat results as review signals for this browser/session or public target. Re-test after one change, then use Safe Copy or notes that avoid raw identifiers.