We check SSL, DNS records, and HTTP security headers. You get an A–F grade with plain-English explanations and fixes.
3 free scans per hour · No signup required
This was a one-time snapshot. Aegisly watches your domain 24/7, alerts you the moment something changes, and guides you through every fix.
No credit card. No spam. Cancel anytime.
Our free domain security checker analyzes your website across three critical security categories that attackers commonly exploit. You receive a score from 0 to 75 points, split evenly across SSL certificates, DNS records, and HTTP headers.
We verify your SSL certificate is valid, not expired, issued by a trusted authority, and using modern TLS protocols. Weak or missing SSL is the #1 cause of browser warnings and trust loss.
We check your SPF, DKIM, and DMARC DNS records to ensure attackers cannot spoof emails from your domain. Poor DNS configuration is how phishing emails reach your customers' inboxes.
We verify six HTTP security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. These prevent cross-site scripting, clickjacking, and data leaks.
Small and medium businesses are increasingly targeted because they rarely have dedicated security teams. A single compromised domain can damage customer trust, hurt email deliverability, and expose sensitive data. Our free website security scan gives you the same visibility that attackers use to find weaknesses in your defenses.
Our free security scan checks three key areas: SSL certificates (validity, expiration date, and issuer trust), DNS records including SPF, DKIM, and DMARC for email authentication, and HTTP security headers like HSTS, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options. Each category is scored and contributes to your overall security grade from A to F.
Yes, completely free. No signup required, no credit card, no email address needed. Just enter your domain and get your security grade in seconds. We offer up to 3 scans per hour per IP address to prevent abuse.
Your security grade reflects how well your domain is protected across three categories (SSL, DNS, HTTP headers) each worth up to 25 points, for a total of 75 points. An A grade (67-75 points) means excellent security. B (56-66) is good with minor fixes needed. C (44-55) has significant gaps. D (33-43) is poor with critical vulnerabilities. F (0-32) means serious security risks that need immediate attention.
The free security scan completes in under 10 seconds. We check your SSL certificate, DNS records (SPF, DKIM, DMARC), and HTTP security headers in parallel, then calculate your security grade and generate actionable recommendations.
SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting & Conformance) are email authentication protocols that prevent email spoofing and phishing. SPF defines which servers can send email for your domain. DKIM adds cryptographic signatures to emails. DMARC enforces policies for handling unauthenticated emails. Without these, attackers can send fake emails appearing to come from your domain.
Key HTTP security headers include HSTS (forces browsers to use HTTPS), Content-Security-Policy (prevents cross-site scripting attacks), X-Frame-Options (stops clickjacking), X-Content-Type-Options (prevents MIME-type sniffing), Referrer-Policy (controls referrer data), and Permissions-Policy (limits browser features). Our scan checks all six and explains exactly how to fix any missing headers.