Free tools · no login
🛡 Website security check
Grade a site A+ to F on HSTS, CSP, clickjacking, cookie flags, TLS versions and leaked server versions, with a fix for each finding.
B
Security grade B
70/100 · 2 findings · server: github.com
https://github.com/ · checked 2026-09-20 01:58 UTC from Vigil's servers
1 high1 low
Security headers
| ✓ | strict-transport-security | present |
| ✓ | content-security-policy | present |
| ✓ | x-content-type-options | present |
| ✓ | x-frame-options | present |
| ✓ | referrer-policy | present |
| ✕ | permissions-policy Permissions-Policy missing |
missing |
TLS protocol support
Not an https site, TLS was not tested.
TLS 1.0 and 1.1 should be off; TLS 1.2 and 1.3 on.
Findings and how to fix them (2)
Site is served over plain http
high
Serve over https and redirect http to https.
Permissions-Policy missing
low
Restrict camera, microphone, geolocation etc. with a Permissions-Policy header.
Share this result:
Run the other free checks on this site:
Watch this automatically
Monitor this site free
Vigil re-checks every minute and tells you the moment something changes
Uptime checks every minute with latency history, weekly security rescans with an alert when the grade drops, SSL expiry alerts and domain expiry alerts, plus DNS-change detection. Alerts on Telegram, Slack, Discord, email or any webhook.
Free plan, no card. Set up in 60 seconds. Start with http://github.com/.