Malware & blocklists
Known malware, injected spam and listings on major blocklists.
Free tool
Website Security Scan
Scan any website for malware, blocklists and security gaps in seconds.
Website security scan
What the Security Scan Checks
SSL certificate
Issuer, expiry date, protocol and whether browsers trust it.
Security headers
HSTS, Content-Security-Policy, X-Frame-Options and other browser protections.
Website firewall
Whether a web application firewall filters attacks before they reach the server.
Data exposure
Error messages, debug output, insecure cookies and software versions on show.
Risk level & fixes
Grades for SSL, headers and reputation, an overall risk level and what to fix first.
Need Help Fixing What You Found?
Our team fixes DNS, SSL, security and hosting problems every day. Tell us what you found and we'll get back to you within one business day.
Free tools
More Free Tools
Check other parts of your domain and website.
FAQ
Website Security Scan FAQs
Yes. The scan only reads what any visitor's browser would see. It doesn't log in, submit forms or send attack traffic, so it can't change or harm the website.
It means no public warning signs were found. A full security review also checks the server, the application code and its plugins, which a public scan can't see.
The checks run in your free Pheonix account, which keeps them fast and protected from abuse. If you're not signed in, you'll be asked to sign in or create an account, then taken straight to your results.
Yes. Our security team fixes malware, SSL and header problems and can harden your server and application. Contact us for a free review.
Ready to build something great?
Tell us about your project and get a free consultation and estimate within one business day.
- Fixed, itemised quote
- You own the source code
- Support after launch