Free tools · no login
🛡 Website security check
Grade a site A+ to F on HSTS, CSP, clickjacking, cookie flags, TLS versions and leaked server versions, with a fix for each finding.
What we check
Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie Secure / HttpOnly / SameSite flags, TLS 1.0 – 1.3 support and version-leaking headers.
How it's graded
Start at 100. High findings cost 25 points, medium 12, low 5. 95+ is A+, 85+ A, 70+ B, 55+ C, 40+ D, below that F.
Try it on
Watch this automatically
Monitor your site free
Vigil re-checks every minute and tells you the moment something changes
Uptime checks every minute with latency history, weekly security rescans with an alert when the grade drops, SSL expiry alerts and domain expiry alerts, plus DNS-change detection. Alerts on Telegram, Slack, Discord, email or any webhook.
Free plan, no card. Set up in 60 seconds.