What we check

24 security checks in one pass — 14 shown free, the rest in the full report. No signup, no waiting.

Core Security

  • Malware & phishing blocklist
  • HTTPS redirect
  • SSL certificate & TLS version
  • Security headers (A+ graded)
  • Server & technology disclosure
  • Cookie security & CORS policy
  • Mixed content & clickjacking

DNS, Transport & Hardening

  • DNSSEC & DNS CAA records
  • HSTS preload & header strength
  • Subresource Integrity (SRI)
  • Open redirect vulnerability
  • HTTP TRACE & cross-origin isolation
  • security.txt disclosure file

Deeper technical checks that stop your site's connection being hijacked, tampered with, or spoofed.

Email Authentication

  • SPF record (with policy strength)
  • DKIM record
  • DMARC policy (enforcement)
  • MTA-STS (email in transit)
  • MX records

DNS and policy checks that stop your domain being used for phishing, improve deliverability, and protect email in transit.

Security Report (PDF) — £49

Every finding explained, with a prioritised action plan of what to fix first — ready to hand to your developer or web host. Delivered to your inbox within minutes — no account needed.

Scan questions

Is the scan really free?

Yes — the free scan runs 14 security checks and shows your results in seconds, with no signup. A full PDF report with 10 more checks plus prioritised fixes is an optional one-off.

What does the scan check?

Malware/phishing blocklist, core security (HTTPS, SSL/TLS, security headers, cookies, CORS, clickjacking), DNS and transport (DNSSEC, CAA, HSTS, SRI, cross-origin isolation), and email authentication (SPF, DKIM, DMARC, MTA-STS, MX) — 24 checks in a single pass, 14 shown free and the rest in the full report.

Do I need to install anything or give access to my site?

No. The scan only looks at what is publicly visible for your domain — the same things a browser or an attacker can see. Nothing is installed and no login is needed.

What's in the paid PDF report?

Every finding explained in plain English, with a prioritised action plan of what to fix first — ready to hand to your developer or web host. It's emailed within minutes, with no account required.

What if the scan finds problems?

You can act on the findings yourself using the report, or we can rebuild the site properly — secure, UK-hosted and fixed-price — through our Fix & Rebuild service.