Free Website Exposure Check

Free website security check: see what your site gives away, in about 30 seconds

Your website is the one part of your business anyone in the world can inspect. In about 30 seconds this free check shows how much it reveals about the software behind it, how its browser security headers are set up, and whether its cookies are protected. You get an A–F grade straight away, with no sign-up, and a free full report with fixes. No obligation, no credit card, and nothing on your site is changed.

New Zealand: Under the Privacy Act 2020, Information Privacy Principle 5 requires reasonable security safeguards for personal information, and your contact and enquiry forms collect exactly that. The NCSC NZ’s Own Your Online guidance for businesses covers the same basics.

Australia: Australian Privacy Principle 11 under the Privacy Act 1988 (Cth) requires reasonable steps to protect personal information, and the Notifiable Data Breaches scheme applies if it’s exposed. Hardening internet-facing systems is also central to the Essential Eight.

  • Information disclosure

    Server, platform and framework details your site announces, such as an exact PHP or web server version, plus generator tags in the page source.

  • Security headers, one by one

    Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and more: whether each is present and whether it is set up well enough to protect visitors.

  • HTTPS and HSTS

    Whether the site uses HTTPS everywhere, redirects plain HTTP, and tells browsers to insist on a secure connection for long enough.

  • Cookie protection

    Whether cookies, especially sign-in cookies, use the Secure, HttpOnly and SameSite settings that stop them being intercepted or misused.

  • A grade you can compare

    An A–F grade and score out of 100, with severities aligned to widely used security scanners, so your result means the same thing elsewhere.

  • Fixes in plain English

    Every finding comes with what we saw, why it matters and exactly how to fix it, rated Quick Win, Medium or Project, in a private report you can pass to your web developer or IT provider.