Free · in 20 seconds
Scalia Security Check. Your site, on the same test as ours.
Enter your site’s address: you get its score out of 100, its place in our ranking and each problem explained simply, with what could happen.
Transparency
What the test looks at. And what it never does.
The test reads your site like any browser: it tries no sign-in, forces nothing and tries no password. The score starts at 100 and each problem takes some away, according to how serious it is.
- Security headersHSTS, CSP, frame protection, content type, referrer, permissions.
- EncryptionRedirect to HTTPS, valid certificate, old TLS versions refused.
- CookiesSecure, HttpOnly and SameSite protections on session cookies.
- Email and domainSPF, DMARC, MTA-STS, CAA, and DNSSEC where the domain allows it.
- What the website gives awayVersions the server shows, sensitive areas in robots.txt, a security contact (security.txt), external scripts without an integrity check.