Free website check
How secure is your website really?
Scan checks any public website for security, data protection, accessibility, findability and performance and explains every finding in plain language. Free and without an account.
01The problem
You cannot see the gaps from the inside
A website can look flawless and still be wide open: a missing security header, a tracking script before consent, a form without labels. From the outside it only shows when it is too late.
Many problems are not in the visible content but in what the server sends along: headers, certificate, DNS and mail records. Nobody checks them day to day because the browser does not show them.
Data protection and accessibility are no longer optional. Cookies without consent, requests to third parties and missing alt texts can draw legal warnings, and accessibility is now mandatory for many businesses in the EU.
If you hire an agency or a provider, you can hardly judge the result yourself. Scan gives you an independent view from the outside, in minutes instead of an audit lasting weeks.
02How it works
From address to report
All you need is a web address. No installation, no server access, no account.
Enter the address
You enter the web address you want to check. It can be your own site or any other public website.
The site is read
The scanner opens the address like a browser and reads what every visitor receives: response headers, the TLS connection, DNS and mail records, markup, cookies and requests to third parties.
A score per area
Every area gets a score from 0 to 100. It measures not only whether something exists but how well it is configured.
Findings in plain language
Every finding is explained clearly, with advice on how to fix it. You can share the report through a permanent link, for example with your agency.
03What gets checked
Six areas, one report
Scan checks what can be measured from the outside. It never logs in and never tries to exploit anything.
Security
Security headers such as Content-Security-Policy and HSTS, TLS version, certificate and publicly visible directories.
Data protection
Cookies, consent and requests to third parties that already transfer data on the first visit.
Accessibility
Requirements that can be checked automatically, such as alt texts, labels and contrast, in line with the European Accessibility Act.
Mail and DNS
SPF, DKIM and DMARC of the mail domain plus DNSSEC and CAA, so nobody can send mail in your name.
Findability
The basics for search engines and AI assistants: titles, descriptions, structured data and crawler access.
Legal and performance
A reachable imprint and privacy policy, mandatory shop details as well as loading behaviour and server response time.
04Independent
Why you can trust the result
The scan itself is free. Every check and every score is available without an account and without payment, nobody has to buy anything to see how a site performs.
Paying changes no score. Paid plans add PDF export, monitoring and API access, the scoring code does not know which plan a scan belongs to.
The rules are public. The methodology page is generated from the same code that scores every scan, including its version number.
05FAQ
Questions about Scan
Does the scan cost anything?
No. Every check and every score is free. Paid plans add PDF export, monitoring and API access, they do not change the score.
Do I need an account?
No. A web address is all a scan needs. With a free account your scans stay private and you see the score history of your sites.
Does the scan attack my website?
No. The scanner only reads what every visitor receives as well. It never logs in and never tries to exploit a vulnerability.
Can I check any website?
Yes, any publicly reachable web address. Pages behind a login are only visible to the scanner up to the sign-in.
Does the scan replace an accessibility audit?
Not completely. An automated scan finds many barriers but not all of them. It shows you where to start, and the accessibility guide explains the rest.
Is this legal advice?
No. Scan shows technical findings and explains them, it gives no legal advice. For legal questions, please ask a lawyer.
How is a site scored?
By public rules listed on the methodology page, including weights and version number. When the rules change, stored scans are rescored under the new version.
What if a finding is wrong?
Write to us with the link to the scan. We check the finding against the real site and correct the scanner if it got it wrong.
06Check now
Check your website in a few minutes
Free, available right away and without an account. All you need is a web address.
Custom software. Built to last.