Website Security Checker

A combined diagnostic overview — SSL, security headers, HSTS, and mixed content — in one place. This is a diagnostic tool, not a penetration test: it performs no exploitation, brute forcing, or destructive checks of any kind.

About this tool

This combines three independent, non-intrusive diagnostics into one view: certificate validity, security header presence, and (via the linked dedicated tool) mixed content. Every check here is a normal request a browser would make anyway — nothing here attempts to exploit, brute-force, guess credentials, or perform any destructive test against the target.

What this is not

This is not a penetration test or a vulnerability scanner. It doesn't probe for application vulnerabilities, attempt authentication, or test anything beyond what a normal HTTPS connection and page request reveal. Use it as a first-pass configuration check, not a substitute for a real security assessment.

Related tools: