Is your website secure?
Run a free passive scan — TLS, security headers, DNS, certificate history, exposed files, cookies, email security and page content, graded A to F with plain-language fixes and a shareable report. Takes about ten seconds.
Passive checks only — DNS, TLS certificate, security headers, certificate logs, exposed sensitive files, cookies, email security and page content. No port scanning, no logins, nothing installed. We don’t store scan results.
What this scan does — and doesn’t
- Does: read your site’s public DNS records (including email records), perform one TLS handshake (the same thing a browser does), read the homepage’s headers, cookies and markup, request a handful of well-known sensitive file paths (like /.env) the way any browser could, and check public certificate-transparency logs.
- Doesn’t: scan ports, try logins, send payloads, or touch anything behind your login. A file only counts as exposed when its actual contents answer — a bare “page found” proves nothing.
- Your data: we don’t store scan results. Rate limiting uses short-lived, in-memory counters — nothing is written to a database.
Found issues? I fix these for a living.
Every LogicFast build ships with a security review — headers, TLS and the basics done right from day one.