Free tool
Server health check in 30 seconds
Enter a domain and see TLS, the certificate, security headers and email settings — with real data, without testing anything. We only read what the server publicly broadcasts, just like any browser.
We open one connection and read whatever it broadcasts publicly — a few seconds.
What “passive” means
We open one normal connection to the server and read whatever it returns — certificate, headers, DNS records. It’s exactly what every visitor sees.
We don’t scan ports, we don’t try exploits, we don’t “hit” anything. That’s the line between a legitimate check and an attack — and we don’t cross it. Anything we can’t confirm from here, we report as “not confirmed”; we don’t guess.
What it actually looks at
Four things that usually get forgotten
TLS & certificate. When it expires, which TLS version is running, whether the name matches. An expired certificate takes the site down overnight.
Security headers. HSTS, clickjacking protection, nosniff. Small settings missing on most sites that close easy doors.
Server exposure. Whether it redirects to HTTPS, what banner it shows, whether it compresses. What anyone learns about you just by looking.
DNS & email. SPF, DMARC, DNSSEC, CAA. Without SPF/DMARC, anyone can send email “from you” — and you won’t even notice.
Found something serious?
The automatic check is the beginning, not the end
A passive check shows what’s visible from outside. Finding out what actually breaks takes manual testing — with written permission and an agreed window.
Do you know what your server is broadcasting right now?
Enter your domain above and see. And if you don’t like something, we’ll tell you what can be fixed and how.