Free and independent. No account, no sales pitch.
Get a report card for your website. In plain language, with the evidence.
A rating from A to F for a site's security, connection, domain and privacy. Readable without technical knowledge.
Handy to check whether a site is in good shape, or to show someone that it is.
What we check
- Security: who your site lets in
- A door policy that lets everyone in stops nobody. So we do not check whether your site has rules, but who those rules let through. Having none weighs as much as rules that allow everything, because your visitor cannot tell the difference.
- Connection: is the padlock trustworthy
- Whether the site forces https, which TLS version it uses, and whether the certificate is valid and in its name. The difference between a green padlock and a connection that is truly closed.
- Domain and route: properly set up
- Signals that the domain cannot be hijacked and that traffic goes the right way: DNSSEC, an authorised route, and a findable address for security reports.
- Privacy: who is watching along
- Which third parties load inside the page, whether that falls inside or outside the EU, whether trackers start before consent, and whether a privacy statement can be found.