Website security scan

See what a website shows the world, and what it gives away.

Enter an address to check blacklist status, signs of malware, CMS and technologies, known vulnerabilities, SSL, hosting, caching and SEO basics. It works from the outside, like a visitor, so it can only report what is visible.

Website address

Gentle scanSlower and quieter: requests are spaced out, fewer links are tested and the scan never pretends to be Googlebot, so site firewalls (cPanel/CSF, Imunify360, WAFs) are much less likely to block it. It stops by itself if the site starts refusing connections. Deep scanAlso probes for exposed files and exact versions, and runs the Nuclei template scanner, which sends thousands of test requests. Only for sites you own: you prove it once with a small file or DNS record.

See what a website shows the world, and what it gives away.

01Blacklist status

02What this site runs

03Security findings

04Additional checks

04Known vulnerabilities (CVE)

05Uptime and errors

06Domain and nameservers

07Email security

08FTP access

09SSL / TLS details

10Source code: malware and encoded content

10Malware scan

11Redirects on sub-links

12Deep scan

13JavaScript libraries

14Control panel and admin login

15Cookies, email addresses and login forms

16JavaScript rendering and API endpoints

17Technologies

18Plugins and themes

19Page speed and caching

20SEO

21Subdomains and related domains

22What this scan cannot see