Why must I prove domain ownership?

To prevent using a hosted security checker against third-party sites without authorisation.

Does the check test vulnerabilities such as SQL injection?

No. It reads response headers only, with no exploit payloads or active vulnerability probing.

Can I use it for Nigerian websites?

Yes, after verifying control of a publicly reachable HTTPS domain, including .ng and .com.ng domains.

Read-only · ownership verified

Check the basics that protect your website.

Discover missing or weak response security headers and get practical remediation suggestions. This check only works for domains you prove you control.

1 HTTPS request per assessmentVerification requiredNo exploit traffic

1. Verify your domain

Enter a domain you own or have written permission to assess. Publish our one-time proof file at the address shown.

Website domain

2. Assess HTTP protections

Once verified, the checker looks for HSTS, Content Security Policy, anti-framing, MIME sniffing controls, Referrer-Policy and Permissions-Policy.

We cannot inspect all TLS, application vulnerabilities, malware, authentication or hosting configuration from response headers.

Understand security headers

Learn how each common HTTP header helps reduce preventable browser risks.

Explore tool ↗

▤

Track your assessments

Review recent verified assessments stored in your temporary session.