Perform a comprehensive security scan on any website. Get a detailed report card with grades for SSL, content risk posture, content categories, and subdomain analysis.
Trial scan returns the web filtering category. Free trial: 20 lookups per visitor.
Here is an example of the comprehensive security report generated for a scanned website.
Country: United States · 12 filtering categories assigned
Valid certificate from DigiCert. TLS 1.3 supported. HSTS enabled. Certificate expires in 348 days.
No unsafe content, or suspicious activity detected. Not listed on any security blacklists.
Categorized as Technology, Software Development, Cloud Services. No restricted or flagged categories.
Content-Security-Policy present. X-Frame-Options set. Minor improvement suggested for Permissions-Policy header.
A breakdown of the technical details revealed by the website security scan.
Our scanner identifies active subdomains and checks their security posture individually.
| Subdomain | IP Address | SSL Status | Category | Status |
|---|---|---|---|---|
| www.github.com | 140.82.121.4 | Valid | Technology | Active |
| api.github.com | 140.82.121.6 | Valid | API / Web Services | Active |
| gist.github.com | 140.82.121.4 | Valid | Software Development | Active |
| pages.github.com | 185.199.108.153 | Valid | Web Hosting | Active |
| education.github.com | 140.82.121.4 | Valid | Education | Active |
| docs.github.com | 185.199.109.154 | Valid | Documentation | Active |
Our deep analysis covers every aspect of a website's security and content profile.
Full certificate chain validation, protocol version checking, cipher suite analysis, and HSTS header detection.
Identifies active subdomains through DNS enumeration and certificate transparency logs. Each subdomain is individually assessed.
Classifies the website across 59 content categories. Supports multi-label classification for diverse sites with multiple content types.
Checks for common misconfigurations like missing security headers, exposed server versions, and insecure cookie settings.
Track how a website's security grade changes over time. Get alerts when a previously safe domain becomes compromised.
Download the full security report as a PDF for compliance documentation, management presentations, or vendor assessments.
Use our API to continuously monitor your domains and third-party vendor sites. Get instant alerts when security posture changes.