Free tools · Web

Web posture

Everything on the HTTPS / web side: TLS cert chain + protocol scan, security headers (CSP, HSTS, COOP / COEP / CORP), subdomain inventory via Certificate Transparency, and the takeover surface that comes from dangling CNAMEs at third-party services. Free, no signup, unlimited.

TLS / SSL check

Cert chain, expiry, protocols, HSTS

Security headers

CSP, HSTS, COOP / COEP / CORP

Subdomain inventory

CT log enumeration + drift

Subdomain takeover

Dangling CNAME + 20+ service fingerprints

CT log lookup

Full cert history for any hostname

Other categories

Email authentication

Will your email reach the inbox? (DMARC, SPF, DKIM)

DNS & domain

Is your DNS set up right? (DNSSEC, CAA, vendor inventory)

Threat intel

Investigate something suspicious (reputation, threat feeds)

Compliance & audit

Evidence for the audit (workpapers, crosswalks, scorecards)