◈ Website security check
A website security check fetches your page once and grades it A+ to F on 6 response headers (Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy), cookie flags, TLS versions and leaked server versions, with a fix for each finding. It is free, needs no login, and allows 20 checks an hour.
Grade a site A+ to F on HSTS, CSP, clickjacking, cookie flags, TLS versions and leaked server versions, with a fix for each finding.
What we check
Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie Secure / HttpOnly / SameSite flags, TLS 1.0 – 1.3 support and version-leaking headers.
How it's graded
Start at 100. High findings cost 25 points, medium 12, low 5. 95+ is A+, 85+ A, 70+ B, 55+ C, 40+ D, below that F.
Try it on
Vigil re-checks every minute and tells you the moment something changes
Uptime checks every minute with latency history, weekly security rescans with an alert when the grade drops, SSL expiry alerts and domain expiry alerts, plus DNS-change detection. Alerts on Telegram, Slack, Discord, email or any webhook.