What does the SiteGuardian security scanner check?

The scanner checks SSL/TLS certificates, 6 security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), DNSSEC, email authentication (SPF, DKIM, DMARC), SMTP encryption, MTA-STS, DANE/TLSA, CAA records, and DNS exposure. Results are scored 0-100 with an A-F grade.

Is the security scanner free?

Yes, completely free. No account, no signup, no credit card needed. Enter any domain and get instant results.

How is the security score calculated?

The score is out of 100 points: Security Headers (25 pts), SSL/TLS (20 pts), Email Authentication (15 pts), DNS Security (15 pts), HTTPS Enforcement (10 pts), security.txt (5 pts), MTA-STS + TLS-RPT (5 pts), and Server Hardening (5 pts). Grade A = 90-100, B = 75-89, C = 60-74, D = 40-59, F = 0-39.

Which compliance frameworks does the scan map to?

Scan findings are mapped to GDPR, NIS2, CRA (Cyber Resilience Act), ISO 27001, SOC 2, PCI DSS, and other EU regulatory frameworks. Each finding shows which regulations it affects.

Where is the scan data processed?

All scans run from EU-hosted infrastructure in Germany. No data is transferred outside the EU. Scan results are cached temporarily and not stored permanently unless you create an account.

Bezpłatnie — konto nie jest wymagane

Jak bezpieczna jest Twoja strona?

Wpisz domenę. Otrzymaj ocenę bezpieczeństwa, wynik i szczegółowe zestawienie — w kilka sekund.

Sprawdzamy certyfikaty SSL, nagłówki bezpieczeństwa, DNSSEC, uwierzytelnianie e-mail, szyfrowanie SMTP i więcej.

Co sprawdzamy

Twoja strona jest skanowana w tych wymiarach bezpieczeństwa. Każdy jest oceniany niezależnie.

Nagłówki bezpieczeństwa

25 pkt

HSTS, CSP, X-Frame-Options, X-Content-Type, Referrer-Policy, Permissions-Policy

Certyfikat SSL/TLS

20 pkt

Key strength, signature algorithm, chain depth, TLS version, HTTPS redirect

Uwierzytelnianie e-mail

15 pkt

SPF, DKIM key strength, DMARC policy enforcement, MTA-STS, TLS-RPT, SMTP encryption

Bezpieczeństwo DNS

15 pkt

DNSSEC validation, CAA records, DANE/TLSA, DoH consistency

security.txt

5 pkt

Vulnerability disclosure contact per RFC 9116

Prywatność serwera

5 pkt

No version disclosure, no X-Powered-By, restricted CORS headers

Enter a domain

Type any URL — we handle the rest. No login, no signup, no credit card.

We scan everything

SSL, headers, DNS, email auth, SMTP encryption — checked in seconds from our EU servers.

See your grade

A-to-F grade, 0-100 score, and detailed recommendations for every finding.

Jeden skan pokazuje problem. Ciągły monitoring mu zapobiega.

Rozpocznij za darmo. Jeden monitor, alerty SSL i domen, bot Telegram — karta kredytowa niewymagana.

Rozpocznij bezpłatny monitoring

Sprawdź, jak Twoja branża wypada na tle benchmarku bezpieczeństwa UE →