Instantly get a complete security health check for your website. Scan SSL certificates, DNS configuration (SPF, DKIM, DMARC), security headers, and exposed API keys in public JavaScript. Plain-English explanations with A+ to F grades. Built for indie hackers and makers. Core scans are free, no signup required. Login is required for scan history and premium features.
Enter any domain to get a comprehensive security report. We check SSL certificate health, DNS security (SPF, DKIM, DMARC, DNSSEC), security headers, blacklist status, and exposed secrets in public JavaScript.
We only scan what a browser can fetch. No endpoint probing or credential validation.
Every issue comes with plain-English explanations and actionable fix recommendations. Perfect for indie developers who ship fast but want to stay secure.
Complete security scan: SSL, DNS, headers, blacklists, and exposed secrets in public JavaScript. Get A+ to F grades with plain-English explanations.
Passive scan of public HTML and JavaScript for exposed API keys. We do not validate credentials or access private content.
Disabled until domain ownership verification and paid access are available. No endpoint probing is run today.
Check certificate validity, expiration, protocol version, plus SPF, DKIM, DMARC, and DNSSEC configuration.
Plus: generate creative, brandable domain names with AI and check availability across popular TLDs.
Core scans are free and do not require signup or a credit card. Login is required for scan history and premium features.
Core scans are free and do not require signup. Login is required for scan history and premium features.
We scan SSL certificate health, DNS configuration (SPF, DKIM, DMARC, DNSSEC), security headers, blacklist status, and exposed API keys in public JavaScript.
No. The Secret Scanner only inspects public HTML and JavaScript that a browser can fetch. It does not probe endpoints or validate credentials.
Built for indie hackers, makers, and solo founders who ship fast but want to stay secure. No security expertise required - we explain everything in plain English.
Plain-English explanations, a Secret Scanner focused on public code, A+ to F grading system, and indie-friendly pricing. No enterprise complexity.
View all frequently asked questions →
Your complete security health check, instantly. Core scans are free, no signup required.
Run Free Security Audit →
Read all articles →