webzod: website security and quality checker

try · ·
passive checks only, no account needed

Watch every check run in a live console, then get a scored report with fixes for your stack.Enter a domain and watch every check run in a live console. Then get a scored report with fixes written for your stack.

Every check is passive: DNS queries, a TLS handshake and the requests a browser would make. What the scanner requests

› webzod scan example.com sample 37/37
tls ✓ handshake tls1.3 · chain ok · expires 61dhandshake tls1.3 · chain ok
email ✗ DMARC missing (no _dmarc.example.com)
headers ! CSP present but allows 'unsafe-inline'CSP allows 'unsafe-inline'
dns ✓ DNSSEC chain valid · ECDSAP256SHA256
hygiene × could not check registrar expiry (RDAP timeout after 10s)
· grade B · 80/100 · 38.4s

What it checks

all 37 checks