Free Tool
Revisa tu HTTPS, tu certificado y las cabeceras de seguridad que envía tu sitio, las que casi nadie configura.
Free, no signup. 15 scans per hour.
Inspecting headers and certificate…
Each one is a single line in your server config. Click any row to see what it does and what to add.
The padlock only means the connection is encrypted. It says nothing about whether your site can be framed by an attacker, whether an injected script would run, or whether your certificate expires next week. Those are decided by response headers most sites never configure — and they take minutes to add.
Headers are quick wins, but a policy that is too strict breaks your own site. We configure them and test before shipping.
Get a free strategy session