Made a free tool for quick website security audits. Paste a URL, get a letter grade.

What it checks:

  • SSL cert validity + days until expiry
  • Security headers (HSTS, CSP, XFO, XCTO, Referrer-Policy, Permissions-Policy)
  • DNS config (A, AAAA, MX, SPF records)
  • TTFB response speed

http://5.78.129.127/security-scan

The individual checks are also available as API endpoints you can use in monitoring scripts or cron jobs:

curl http://5.78.129.127/api/ssl/yourdomain.com
curl http://5.78.129.127/api/dns/lookup/yourdomain.com

Free, no signup. What checks would you add?

  • ken
    link
    fedilink
    arrow-up
    1
    ·
    22 hours ago

    This is terrible for privacy due to cleartext HTTP. At minimum fix your TLS before spamming further, please.