Free tools · no login
🛡 Website security check
Grade a site A+ to F on HSTS, CSP, clickjacking, cookie flags, TLS versions and leaked server versions, with a fix for each finding.
Could not check https://expired.badssl.com/. Could not fetch https://expired.badssl.com/: TLS error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1010)
What we check
Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie Secure / HttpOnly / SameSite flags, TLS 1.0 – 1.3 support and version-leaking headers.
How it's graded
Start at 100. High findings cost 25 points, medium 12, low 5. 95+ is A+, 85+ A, 70+ B, 55+ C, 40+ D, below that F.
Try it on
Watch this automatically
Monitor this site free
Vigil re-checks every minute and tells you the moment something changes
Uptime checks every minute with latency history, weekly security rescans with an alert when the grade drops, SSL expiry alerts and domain expiry alerts, plus DNS-change detection. Alerts on Telegram, Slack, Discord, email or any webhook.
Free plan, no card. Set up in 60 seconds. Start with https://expired.badssl.com/.