Run the check

Passive, read-only requests only. We fetch the homepage, headers, certificate and a small list of commonly exposed files (for example /.env). Nothing is exploited and nothing is changed.

Site to check

I am authorised to perform this read-only check against the site above, and I understand it only inspects the public surface.

Run the free check