Free Tools
Free Security Checks For Your App
One check per page, no account. Each looks only at what any visitor could see, and tells you exactly what to change.
Security Headers Check
Enter a site and see which browser-level protections it sends — and which it is missing — with the fix for each.
Email Security Check For Any Domain
See whether anyone could send email that looks like it came from your domain — and what records close the gap.
Is Your Source Code Public? Source Map Check
Many production builds publish .map files that turn minified JavaScript back into your original source. This check looks for them.
CORS Checker For Your API
Send a request from an origin your site has never heard of and see whether it is trusted anyway.
Also free: the PRD Builder, which turns an app idea into a build-ready spec.