Free Website Security Scan: Instant A–F Grade | NovaPentest

Free website security scan

Check any site's HTTP security headers, TLS certificate, cookies, Content Security Policy and email DNS records. No signup and no email. Results in under a minute.

The free scan only reads what a site sends to every visitor. It sends no attack payloads, so you can check any public website.

What the free scan checks

HTTP security headers such as HSTS and X-Content-Type-Options

TLS certificate validity and the HTTP to HTTPS redirect

Cookie flags: Secure, HttpOnly and SameSite

Content Security Policy strength

SPF and DMARC email records

Subresource Integrity on third-party scripts

Clickjacking protection

Mixed content on HTTPS pages

robots.txt and security.txt

Exposed server and framework versions