Free website security check

Is your site exposed to the latest flaws?

On 21 October critical flaws were disclosed in PHP, Node.js, Java and GitLab; PHP2Shell was being exploited before it was even announced. Enter your site’s address and see its security from the outside in a few seconds.

It only looks at public information: it sends your site a few requests like an ordinary visitor and never tries or changes anything. Please only check sites you own or are authorised to check.

What this check can and cannot see

What we can see from outside

HTTPS, certificate validity and expiry
HTTP → HTTPS redirect and HSTS
A visible PHP version (PHP2Shell)
Platform and version tags such as WordPress
Server version details and security headers

What only an inside look shows

Hidden PHP, Node.js and Java versions
Plugin and theme versions, admin panel security
Self-hosted GitLab and other internal services
Backups, password policy and server settings
Flaws in the code itself (needs authorised testing)

How we can help

Emergency patching

PHP, Node.js, Java and CMS updates; closing the holes, taking backups and checking the site still works.

Upgrades and rebuilds

Moving off unsupported PHP or Node versions, or an outdated platform, to a modern setup that is easy to maintain.

Monthly protection

Update tracking, certificate and uptime monitoring, regular backups and priority action when a new flaw comes out.

Service details

Let's go through the findings

The result has been added to the form below. Send it; we will look at your site and write back within one business day with what needs doing and an estimate. Detailed reviews and tests only happen with your written permission.