Free tools · no login
🛡 Website security check
Grade a site A+ to F on HSTS, CSP, clickjacking, cookie flags, TLS versions and leaked server versions, with a fix for each finding.
A+
Security grade A+
95/100 · 1 finding · server: github.com
https://github.com/ · checked 2026-09-20 01:56 UTC from Vigil's servers
1 low
Security headers
| ✓ | strict-transport-security | present |
| ✓ | content-security-policy | present |
| ✓ | x-content-type-options | present |
| ✓ | x-frame-options | present |
| ✓ | referrer-policy | present |
| ✕ | permissions-policy Permissions-Policy missing |
missing |
TLS protocol support
TLS 1.0 · disabledTLS 1.1 · disabledTLS 1.2 · enabledTLS 1.3 · enabled
TLS 1.0 and 1.1 should be off; TLS 1.2 and 1.3 on.
Findings and how to fix them (1)
Permissions-Policy missing
low
Restrict camera, microphone, geolocation etc. with a Permissions-Policy header.
Share this result:
Run the other free checks on this site:
Watch this automatically
Monitor this site free
Vigil re-checks every minute and tells you the moment something changes
Uptime checks every minute with latency history, weekly security rescans with an alert when the grade drops, SSL expiry alerts and domain expiry alerts, plus DNS-change detection. Alerts on Telegram, Slack, Discord, email or any webhook.
Free plan, no card. Set up in 60 seconds. Start with https://github.com/.