Free Website Analyzer

Yes. Scanning costs nothing and needs neither an account nor a payment card.

Expect about 30 seconds, though a slow site takes longer. The scanner runs inside fixed time and request budgets, so when some checks cannot finish you receive a partial report that names them instead of waiting on an endless spinner.

The HTTPS redirect, security headers, cookies, the SSL/TLS certificate, SPF and DMARC records, robots.txt, the sitemap, security.txt and the core SEO tags.

Technical SEO for the submitted page: status code and redirects, title, meta description, headings, canonical, robots directives, robots.txt, sitemap, hreflang, JSON-LD, links, favicon, social image tags, compression and caching headers. Rankings, traffic and Core Web Vitals are not measured.

No. It sends a handful of ordinary requests, about what a browser visit would, and runs no attack tests or brute force.

Every scan is passive, meaning ordinary public requests with no exploit attempts, port scans or brute force. Adding a site to the dashboard and proving control of it with a DNS TXT record or a meta tag only unlocks scheduled re-scans, which need a verified site by default. The product never tests a site harder than the public scanner does; deeper testing is a separate engagement with a signed agreement and an agreed scope.

Only scan sites that you run or have permission to test. Internal and private addresses are rejected.

It only reads what one public page and its public files expose at that moment. It does not crawl the whole site, log in, test business logic, exploit anything or look inside your servers. A good score means these checks saw no issue, not that the site is secure, and rankings or traffic are out of scope.

Yes. The report is stored without automatic deletion and is shown only through the private link emailed to the address you entered, or from your dashboard if you have an account. You can delete it at any time. It stays private unless you create a share link that expires and can be revoked.

Reports stay available through the private link emailed to you, or in your account history, until you delete them, and each report can be exported as printable HTML, JSON or CSV. To let someone else read it, create a read-only share link, which expires and can be revoked.

It starts at 100 and deducts points for each observed issue by severity: 25 for critical, 8 for important and 2 for informational (capped at 20 in total). Findings with a shared root cause count once, low-confidence observations are listed without being scored, and a check that could not run never lowers the score. The model is versioned and is currently v2.

Every issue in the report includes a fix. If you want help applying them, send us a request.

It keeps the service available by blocking abusive and automated use.