What it checks
Public response errors, HTTPS, redirects, visible PHP clues, common security headers, cookies and mixed-content hints.
Free external risk check
Is your business website showing security warning signs?
Enter a public website address. This quick check looks for visible problems with HTTPS, redirects, server errors, exposed PHP clues and common security headers.
Passive check only
No login needed
Usually under 15 seconds
Check your website
Enter the public URL
Example: www.yourcompany.com. Only standard public websites can be checked.
Your results will appear here
The scanner has not run yet. Enter a public website address above to begin.
What this tool can—and cannot—tell you
External clues first. Server evidence when it matters.
What it cannot see
Hidden malware, backdoors, modified database records, private logs, hosting patches or secret administrator accounts.
What to do next
If you see errors or suspicious behaviour, preserve evidence and ask for a proper review instead of randomly updating everything on the live site.
Frequently asked questions
Before you trust any online scanner
No. It can flag visible warning signs, but confirming compromise normally requires authorised access to the server, files, database and logs. Anyone promising a perfect answer from one public URL is selling confidence by the kilogram.
No. It performs a limited normal web request and reads the response. It does not attempt logins, uploads, password guessing or vulnerability exploitation.
Not reliably from outside. If a precise old version is exposed, the tool can flag it. Otherwise, the hosting control panel, package information or hosting provider must be checked. Some providers also backport patches without changing the visible version number.
Avoid making a series of random live changes. Record the error, preserve recent logs and backups, and get the site reviewed. The cause may be incompatible code, a failed update, damaged files or a security incident.