Website Security Score

How it works

One number helps prioritize before a full audit. Paste a public URL and we compose a teaser score from three shared helpers: security headers grade, light TLS/HTTPS continuity, and DNS email-auth (SPF/DMARC) for the host. Each part is capped and weighted so a single catastrophic miss (no HTTPS, no SPF/DMARC, empty headers) pulls the composite down. The score is for founders who need a directional signal in under a minute - not a compliance grade, insurer questionnaire answer, or pentest report. Different paths and environments can disagree; we sample what your URL returns now plus public DNS. Improve the weakest part first (often headers or DMARC), re-score, then run a full AtRisk URL scan for severity depth and fix prompts. Related free checkers let you zoom into one dimension without losing the composite view. SSRF-safe fetches only; teaser depth only; not a penetration test. Re-score after each fix so the composite moves - then unlock AtRisk Starter when you need detector depth and fix prompts.

This is a free teaser check - not a penetration test, vulnerability assessment, or compliance audit. AtRisk full scans go deeper across more detectors and unlock fix prompts on Starter.