Free passive mini-scan
Check your homepage in under a minute. We request your homepage once, as a browser would, and look up public DNS records. No other pages and no file probing. Nothing intrusive.
Last reviewed: 2026-10-18
What the free scan checks
Four headline checks, as a teaser:
- Whether the site loads over HTTPS and redirects HTTP to HTTPS
- How many of seven key security headers are present
- Whether common analytics and advertising scripts (Google Analytics/Tag Manager, Meta Pixel, TikTok, Snap, LinkedIn, Clarity, Hotjar) appear in the homepage HTML, and whether a consent tool seems present
- Whether SPF and DMARC records protect your domain from email spoofing
The full scan report (QAR 250) runs every check, across up to 10 pages, and explains each finding: what it means, why it matters, a practical fix and the official source.
What it can't tell you
A single server-side request can't see trackers injected later by JavaScript, cookies set after consent, or how your banner behaves. The Full Scan Report checks those in a real browser. Results are indicative only. See the disclaimer.
What happens to your data
We record the domain you scanned, the time, your country (from the network) and, if you give it, your email, so we can follow up about your result. We don't add you to any mailing list. See the privacy notice.
Want the full picture?
The Full Scan Report adds real-browser consent testing, privacy-notice review, DKIM, exposed-file checks and a fix list.