Skip to content
AI Website Security
Free check

What every visitor already sees of your site

The HTTPS certificate, the redirect to HTTPS, the protection headers, mixed content and filtering by security DNS resolvers — checked live, in a matter of seconds. Free, no account required, and nothing is stored: the result exists only on this screen.

What this check looks at

  • The HTTPS certificate: its validity, its expiry date, the name it covers, the negotiated protocol.
  • Redirection: is a visitor who types the address without "https" brought back to the secure version?
  • Protection headers: HSTS, CSP, framing protection, nosniff, Referrer-Policy, cookie flags.
  • Mixed content: scripts or images still loaded over http on an https page.
  • DNS filtering: do public security resolvers (Cloudflare, Quad9) block the domain? A measured fact: a share of your visitors can then no longer reach the site.

Only the homepage is read, just as a visitor reads it. No site file is opened, no path is probed.