Scan any domain for security risks, TLS issues, DNS records, vulnerabilities, and more, with a clear A–F grade and the reasons behind it.
On the App Store for iPhone, iPad and Mac, on Google Play for Android, in the Chrome Web Store, and on the web.
Coming soon: the Microsoft Store for Windows, and the extension for Edge, Firefox and Safari.
Switch languages and the whole app follows instantly, including scan results, in all 7 languages.
More reliable scans: DNS falls back to public resolvers, and connections fall back to IPv4 when a site’s IPv6 is broken.
Friendlier limits: up to 120 fresh scans an hour, and repeat scans of the same site within 30 seconds share one result.
Clearer tabs: Identity, DNS, Email, TLS / Certificates, Headers, Web Stack, Exposure, Infrastructure and Intel.
Web Stack groups detected technologies and shows the evidence behind each one.
Intel shows what changed since your last scan, recent certificates and a reputation summary.
Stricter grading: serious problems cap the grade, and the report says why.
Vulnerability checks match exact software versions, and a check that can’t run says so instead of looking clean.
Ten themes, including a color-blind-safe Accessible theme and the new Prism.
Print-ready PDF reports, now on iPhone, iPad and Mac too.
See and remove your passkeys in the iPhone, iPad and Mac apps, as on the web.
A browser extension, now on the Chrome Web Store (Edge and Firefox coming soon): sign in with your account, scan the site you’re on, and find every scan in your history.
Every export (PDF, HTML, Markdown, text, CSV and JSON) now carries the full report, and the AI Prompt is a focused brief for fixing what’s still open.
Comprehensive domain analysis in a single scan.
Evaluate security headers, Reporting-Endpoints, NEL, cookie policies, HTTPS configuration, redirect hygiene, and get an overall security grade with actionable recommendations.
Full certificate chain analysis, protocol version testing, cipher suite evaluation, OCSP stapling detection, mTLS hints, and certificate transparency log lookups.
Query all DNS record types. RDAP (RFC 9083) registration data with EPP status analysis, WHOIS fallback, domain risk scoring, and lifecycle volatility monitoring. Accepts domains, IPv4, or IPv6.
Exact-version CVE lookup, subdomain takeover detection, JS endpoint discovery, third-party dependency inventory, exposed path scanning, and CT remediation guidance.
Server technology detection, GeoIP location, hosting provider identification, CDN/WAF detection, reverse DNS analysis, and RPKI route-validation signals.
Weighted score across 7 categories: TLS Posture, Web Security, Email Authentication, Attack Surface, Identity, Infrastructure and Reputation. A–F grade with a confidence score, and serious problems cap the grade. How scoring works
On iPhone, iPad and Mac with Apple Intelligence, an on-device model explains findings in plain language, and the scan never leaves your device. Everywhere else, the AI Prompt export gives you a ready-made prompt for the assistant you already use.
Grade the site you’re on in one click with the Chrome extension. See the grade, top findings and every section in the same order as the apps, right-click any link to scan it, and find every scan in your history. Edge, Firefox and Safari coming soon.
Sign in with Google, Microsoft, GitHub, or Apple to sync scans across devices. Stats dashboard shows total scans, unique domains, and average score. 90-day retention with automatic drift detection.
Scan private (RFC 1918) addresses and local hosts from the iPhone, iPad and Mac apps: 6 common ports, or an optional sweep of ports 1–1024. The web app refuses private targets.
Built-in scan log viewer showing per-task timing, phase breakdowns, and error diagnostics. Copy raw logs to clipboard for troubleshooting.
Exports grouped by Fail / Warn / Pass with actionable recommendations, category scores, and finding counts across 7 formats including AI Prompt.
Every scan gets a 0–100 score and an A–F grade, by the same rules on the web and in the apps.
Some problems cap the grade whatever the average says. You'll then see “Capped at …” with the reason.
Each category starts at 100. A failed check takes points off and a warning takes off half as much. Repeats of the same severity count for less each time (the first high-severity failure costs 10, the second 7, then 5 …), and no category can lose more than 30 points. Info notes cost nothing.
Confidence is the share of categories we could actually measure. A category we couldn't reach is left out of the average instead of counting as perfect.
If a check can't run (a timeout, a failed lookup or a rate limit), the report says “Check unavailable”. It never counts as a pass or a failure: it takes no points off, and if a whole category can't be measured, confidence drops instead.
Follow a domain over time and see exactly what changed between scans.
Signed in, Intel compares each scan with your previous scan of the same domain: the score change, new, resolved and changed findings, and a score trend.
The iPhone, iPad and Mac apps run every check from your device; the web app shares the work between your browser and our server.
Need the full technical checklist? See Technical Details for a complete public coverage matrix.
Ten built-in themes, including a color-blind-safe Accessible theme and the full-spectrum Prism.
Dark neon aesthetic with purple and teal glow effects.
Green-on-black terminal hacker aesthetic.
Color-blind safe: blue, amber and rose stay distinct, with WCAG 2.2 AA contrast.
Deep blue ocean with cool cyan accents.
Warm amber and coral tones on dark charcoal.
Cool ice blue with crisp white highlights.
Muted grays with steel-blue accents for low-profile scanning.
Soft pink and magenta with elegant warmth.
Rich green and gold with a luxurious feel.
A full spectrum on a neutral dark base.
Share results in the format that fits your workflow.
Available now on the web, on iPhone, iPad, Mac and Android, and in the Chrome Web Store.
Coming soon: the Microsoft Store for Windows, and the extension for Edge, Firefox and Safari.
