A defensive, read-only configuration check against the address you submit: no exploits, no attacks on credentials, only what your server delivers to everyone. It checks HTTPS reachability and redirects, certificate validity and expiry, the CAA record, security headers, cookies, exposed files and whether others can send mail in your name. Free, no sign-up, instant result.
What it checks
- HTTPS reachability and HTTP-to-HTTPS redirects
- TLS certificate validity and expiry date
- CAA record in DNS
- Security headers such as HSTS, CSP, X-Frame-Options and Referrer-Policy
- Cookie flags (Secure, HttpOnly, SameSite)
- Exposed files and information leaks
- SPF, DKIM and DMARC, i.e. whether others can send email in your name
Who it is for
Website owners, shop operators, agencies and developers who want a quick, honest overview of their public security configuration without installing anything.
Who is behind it
The tool is built and maintained by Slawa Ditzel and the team at nextlevels GmbH, a German web and e-commerce agency (Shopware Silver Partner). Questions or feedback: [email protected].
Pricing
The tool is completely free to use. There is no sign-up, no trial and no paywall behind the result. Results appear directly in your browser, and you can run the check as often as you like for your own or your clients' websites.
