Free instant check

Does your site pass the checks anyone can run against it?

This runs eleven checks in about two seconds: transport security, six response headers, and the document facts that decide whether a screen reader and a phone can use the page. Every result is mapped to OWASP Secure Headers or a WCAG 2.2 AA success criterion, and the scan tells you plainly what it could not test.

One request to your homepage, identifying itself, honouring your robots.txt. Nothing is stored beyond a daily count per address, and we do not email you unless you ask us to.