Quick check
We look at the publicly visible settings of your website and e-mail. We send only ordinary browser-like requests; we do not probe or guess anything.
Showing a result from less than an hour ago.
Extended check of your verified domain
For domains whose ownership you verified we also check public files (.git, .env, backups, phpinfo, server-status, the WordPress user list). We never store file contents.
What this check does not measure
We do not measure TLS certificate validity or ciphers (we only see whether the site loads over HTTPS), we do not compare detected software versions with CVE lists (the Guard subscription does that) and we do not look for application vulnerabilities. The website quality and privacy checks are heuristics, not legal advice. This is a passive snapshot of today, not a guarantee of security or a certificate. The in-depth test with proof is a paid package run after your authorization.