How hardened is your website?

Free with limits

HSTS, CSP, clickjacking, cookies, CORS and version leaks with an A+–F grade and the configuration for your server.

0 of 3 free uses today

curl -sIL https://tuweb.com

On Windows curl.exe -sIL works too. To see session cookies, use the URL of a logged-in page or the login page.

Drop a file here or click to choose oneRead in your browser: it is never uploaded.

Collector that checks headers, TLS, certificate, CORS and exposed files

Available on the PRO plan.