Free website security check
How secure is your website? Find out in under a minute.
Enter your domain and get an instant A–D security grade, with a plain-language explanation and fix for every finding. Built by the penetration testers at CYBEROCO.
- No sign-up needed
- Scans up to 25 pages
- English & Arabic report
The scan is read-only: it reads up to 25 of your pages the way a search engine does (respecting robots.txt) and checks public DNS records. Only scan websites you own or are authorised to test.
What we check
The checks attackers run first.
Encryption
Your HTTPS certificate, redirects and HSTS, and a protocol test that catches servers still accepting outdated TLS 1.0 and 1.1.
Browser protection
Security headers that stop cross-site scripting, clickjacking and content sniffing, plus cookie safety flags.
Email security
SPF, DKIM, DMARC and MTA-STS, which stop criminals sending email that looks like it came from your domain.
Information exposure
Software versions your site reveals, and forgotten staging or admin subdomains exposed in public certificate logs.
Outdated software
End-of-life PHP and vulnerable JavaScript libraries with publicly known exploits.
Leaks across your site
API keys and private keys in pages and scripts, error messages, insecure forms and, for verified owners, exposed .git, .env and backup files.
Questions
Is the scan safe for my website?
Yes. The scan reads your pages the way a search engine does: up to 25 pages (75 for verified owners), a few at a time, following your robots.txt, plus public DNS lookups. Everything is read-only. Nothing is changed, submitted or brute-forced, and links like logout or delete are never followed.
Why do I need to verify ownership for the deep scan?
The deep scan looks for sensitive files. Verifying with a DNS record or a small file proves you own the site, so the tool can't be used to probe other people's websites.
Is this the same as a penetration test?
No. It is a fast external health check. A penetration test by our certified team goes much deeper: application logic, authentication, APIs and your internal network.
Do you store my results?
No. Results are shown to you and not saved. If you request a free review, the summary is sent to our team by email.