🛡 Instant Security Scan

Is My Website Hacked? Find Out in 30 Seconds

We check SSL, DNS records, and HTTP security headers. You get an A–F grade with plain-English explanations and fixes.

🌐
Try: github.com stripe.com shopify.com

3 free scans per hour  ·  No signup required

Scanning your domain's security...
1
Checking SSL certificate
2
Analyzing DNS records (SPF, DMARC)
3
Checking HTTP security headers
4
Calculating security grade

0 / 75 points Scanned just now

Recommended Fixes

    Want continuous monitoring?

    This was a one-time snapshot. Aegisly watches your domain 24/7, alerts you the moment something changes, and guides you through every fix.

    Continuous monitoring
    Instant breach alerts
    Guided remediation
    Monthly compliance reports
    ✓ Check your inbox — your full risk report is on its way.

    No credit card. No spam. Cancel anytime.

    What Does This Free Website Security Scan Check?

    Our free domain security checker analyzes your website across three critical security categories that attackers commonly exploit. You receive a score from 0 to 75 points, split evenly across SSL certificates, DNS records, and HTTP headers.

    🔒

    SSL Certificate Analysis

    We verify your SSL certificate is valid, not expired, issued by a trusted authority, and using modern TLS protocols. Weak or missing SSL is the #1 cause of browser warnings and trust loss.

    🌐

    DNS Security Records

    We check your SPF, DKIM, and DMARC DNS records to ensure attackers cannot spoof emails from your domain. Poor DNS configuration is how phishing emails reach your customers' inboxes.

    🛡

    HTTP Security Headers

    We verify six HTTP security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. These prevent cross-site scripting, clickjacking, and data leaks.

    Why Scan Your Domain?

    Small and medium businesses are increasingly targeted because they rarely have dedicated security teams. A single compromised domain can damage customer trust, hurt email deliverability, and expose sensitive data. Our free website security scan gives you the same visibility that attackers use to find weaknesses in your defenses.

    • Catch problems before attackers do. Our SSL checker flags expired certificates and weak configurations before visitors see browser warnings.
    • Protect your email sender reputation. Without proper SPF, DKIM, and DMARC records, your emails land in spam or get rejected entirely.
    • Understand your security posture in one click. Get an A-F grade with specific, actionable fixes — no security expertise required.
    • Free forever, no signup required. Scan any domain instantly. Compare your score against competitors or track improvements over time.

    Frequently Asked Questions

    What does a free website security scan check?

    Our free security scan checks three key areas: SSL certificates (validity, expiration date, and issuer trust), DNS records including SPF, DKIM, and DMARC for email authentication, and HTTP security headers like HSTS, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options. Each category is scored and contributes to your overall security grade from A to F.

    Is the free security scan really free?

    Yes, completely free. No signup required, no credit card, no email address needed. Just enter your domain and get your security grade in seconds. We offer up to 3 scans per hour per IP address to prevent abuse.

    What does an A-F security grade mean?

    Your security grade reflects how well your domain is protected across three categories (SSL, DNS, HTTP headers) each worth up to 25 points, for a total of 75 points. An A grade (67-75 points) means excellent security. B (56-66) is good with minor fixes needed. C (44-55) has significant gaps. D (33-43) is poor with critical vulnerabilities. F (0-32) means serious security risks that need immediate attention.

    How long does a domain security scan take?

    The free security scan completes in under 10 seconds. We check your SSL certificate, DNS records (SPF, DKIM, DMARC), and HTTP security headers in parallel, then calculate your security grade and generate actionable recommendations.

    What are SPF, DKIM, and DMARC in DNS security?

    SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting & Conformance) are email authentication protocols that prevent email spoofing and phishing. SPF defines which servers can send email for your domain. DKIM adds cryptographic signatures to emails. DMARC enforces policies for handling unauthenticated emails. Without these, attackers can send fake emails appearing to come from your domain.

    What HTTP security headers should every website have?

    Key HTTP security headers include HSTS (forces browsers to use HTTPS), Content-Security-Policy (prevents cross-site scripting attacks), X-Frame-Options (stops clickjacking), X-Content-Type-Options (prevents MIME-type sniffing), Referrer-Policy (controls referrer data), and Permissions-Policy (limits browser features). Our scan checks all six and explains exactly how to fix any missing headers.