What is checked
Only signals visible to anyone from outside are checked, such as certificate and connection settings, security headers and information left publicly exposed. The result lists strengths and areas to improve in plain language.
Sample scorecardDemo data · Sep 21, 2026
B
Overall security grade
A limited preliminary assessment of externally visible security signals.
ABCDEF
Connection security
In good conditionCertificate and connection settings
Security headers
Risk presentUse of basic security headers
Freshness signals
Needs improvementVisible version and software signals
This is a sample; your real website has not been assessed.
See your website's security scorecard.
A limited preliminary assessment of externally visible security signals.
Request a free assessment
A preliminary assessment does not replace a comprehensive security test.
01
Share your address
Share your website address and basic details.
02
Assessment
Agree the authorized preliminary assessment scope.
03
View result
Review strengths and areas for improvement.
About the scorecard
What is not done
No login attempts are made, no forms or sessions are attacked and no load is put on the site. The scorecard is not a penetration test; a detailed test is a separate service carried out with a written scope and permission.
For whose site
Request a scorecard only for a site you own or are authorised to act for. This site does not currently run a real scan; the form shows the sample flow.
After the result
The result is a priority list. Your own team can make the fixes; if you prefer, we agree the scope in writing and take on the fixes and the re-check. Requesting the assessment does not commit you to buying any service.
Related pages
The other security pages: scope, the reporting route and the emergency line.