- Home
- Site check
- Safe
Is your website safe to visit?
Type your site's address. The check looks at what a visitor's browser sees: whether the connection is encrypted, whether the insecure address sends them on to the secure one, and whether the page is protected against the common ways a page gets misused.
Want it fixed?
Ask me
“Ask me to fix it” on any finding fills this in with that finding and the address you checked. Change anything you like; nothing is sent until you press Send, and I reply by email.
What it checks
What a browser looks for before it trusts a page
None of this needs a security expert to read. Each item is a setting at the host, and the report says which one and what it protects.
-
HTTPS
Whether the connection is encrypted, and whether the plain http address sends visitors on to the secure one.
-
HSTS
Whether the site tells browsers never to use the insecure address, even when a visitor types it.
-
Security headers
A content security policy, frame protection and nosniff, three headers that close off the common ways a page gets misused.
-
Files over plain http
Whether any script, image or stylesheet on a secure page is still loaded over http, which browsers block or flag.
What it cannot see
Malware, forms and the server
The check reads the headers and links of one page from outside. It does not scan for malware, test the forms, or look at the server, the plugins or when the certificate expires. A page can pass every check here and still run software that needs patching.
Safety is one of five sections. The full site check adds speed, the basics, whether the site can be found on Google and in AI assistants and whether its email arrives, with every problem in one list.