Free website scan
In about a minute: what your website is built on, what is out of date, whether email can be spoofed in your name, and what to watch. We read only what any visitor can see.
What you get
- The platform (WordPress, Shopify, Wix and 7,000 others), plugins and libraries, with versions where they are visible.
- SSL certificate issuer and expiry, and whether the chain is complete.
- Domain registrar, expiry and status from the registry.
- Email security: SPF, DKIM and DMARC, and who may send email as you.
- Hosting and CDN, security headers, and SEO basics like noindex and robots.txt.
- An honest list of what the scan could not check.
Common questions
Is it safe to scan my site?
Yes. The scanner only reads what any visitor's browser reads: the homepage and up to ten pages, the certificate and public DNS records. It never logs in, submits forms or tests attacks, and it identifies itself as AlertMyBusinessBot.
Will you store the results?
The report is kept for 30 days at a private link so you can share it with your web person. It is not listed anywhere unless you choose to publish it from your account.
Why is a version missing?
Many sites hide version numbers on purpose. Where we cannot see one we say so rather than guess. Declare it in your account to get exact vulnerability alerts.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.