Know your website is secure.
A calm, complete security check for your site. Clear findings, ranked by what matters.
- Certificate expires in 6 days
- No protection against injected scripts
- Outdated code library in use
- Email can be spoofed in your name
Everything that matters. Nothing that doesn't.
Connection
HTTPS, the redirect from plain HTTP, the encryption version and how long your certificate has left.
Security headers
The browser instructions that block injected scripts, framing and downgrade attacks.
Cookies and software
Unprotected cookies, outdated jQuery, version leaks and insecure files on a secure page.
Email and contact
SPF and DMARC records that stop spoofing, and a published security contact.
Free. No account.
Aegis Scan only looks at what any visitor's browser already sees: your homepage, its headers, its certificate and your public DNS records. It never logs in, submits forms or probes for hidden files.
Scanning
- Connection and certificate
- Headers, cookies and software
- Email records
- Security contact
out of 100
Findings
What passed
Score: 100, minus 20 for each "Fix now", 8 for each "Fix soon" and 3 for each "Later" finding. Results are cached for 10 minutes.
Scan another site