Know exactly how secure your website is.

Run comprehensive security scans, get actionable fixes, and keep your website protected 24/7.

Over 2,000 scans run No credit card required 90+ checks across 26 categories Results in minutes

Example Scan Preview

A

example.com

92/100 · Excellent

F
0-49
D
50-64
C
65-74
B
75-89
A
90-100
  • HTTP Security
  • SSL/TLS Security
  • Email Security
  • Exposed Files
  • Cookie Security
  • Platform Fingerprinting
  • Crawler
  • Client-Side Security
  • Database Security
  • Secrets Scanner
  • Source Map Exposure
  • Security Misconfiguration
  • API Data Exposure
  • Subdomain Takeover
  • Performance
  • SEO Health
  • AI/LLM Security
  • AI Visibility (AEO/GEO)
  • Payment Platform Security
  • GraphQL Security
  • JWT Weakness Checker
  • Vulnerable Dependencies
  • Accessibility
  • Compliance
  • Password Policy
  • Google Ranking Diagnostic

Google Ranking Diagnostic

Business & Agency

Find the exact technical reason Google isn't ranking your site — a stray noindex tag, a blanket robots.txt block, a canonical pointing at the wrong domain. The kind of silent, site-killing mistake that's invisible until someone tells you.

Upgrade to Business

All-in-one website security scanning

We check everything that matters and give you clear steps to fix issues.

HTTP Security

CSP, HSTS, X-Frame-Options, and more.

SSL/TLS Security

Trust, expiry, and protocol version.

Exposed Files

.env, .git, backups, and other leaks.

Email Security

SPF, DMARC, and DKIM records.

Cookie Security

Secure, HttpOnly, and SameSite flags.

Platform Fingerprinting

Headers that leak software versions.

Crawler

robots.txt/sitemap paths that shouldn't be advertised.

Client-Side Security

Missing SRI and risky client-side patterns.

Database Security

Misconfigured Supabase/RLS letting anyone read your data.

Secrets Scanner

Leaked API keys and credentials in public code.

Source Map Exposure

Publicly downloadable, unminified source code.

Security Misconfiguration

CORS, directory listing, and verbose error pages.

API Data Exposure

Common API/docs paths leaking data with no auth.

Subdomain Takeover

Dangling DNS records pointing to claimable services.

Performance

Response time, compression, and caching headers.

SEO Health

Title, meta description, and Open Graph tags.

AI/LLM Security

Exposed AI proxy endpoints anyone could use.

AI Visibility (AEO/GEO)

llms.txt, structured data, and AI crawler access.

Payment Platform Security

Insecure delivery and test-mode keys in production.

GraphQL Security

Introspection left enabled in production.

JWT Weakness Checker

Unsigned tokens, missing or long-lived expiry.

Vulnerable Dependencies

Outdated JS libraries with known CVEs.

Accessibility

Missing alt text, language, and zoom support.

Compliance

Missing privacy policy or cookie consent.

Password Policy

Weak or missing signup password requirements.

Business

Google Ranking Diagnostic

Find the exact technical reason Google isn't ranking you.