Built a simple tool that scans any website for security issues and gives you a letter grade (A-F). Checks:

  • SSL certificate validity and expiry
  • Security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
  • DNS configuration (A records, AAAA/IPv6, MX, SPF)
  • Response speed (TTFB)

Try it: http://5.78.129.127/security-scan

Also works as API endpoints for monitoring scripts:

curl http://5.78.129.127/api/ssl/example.com
curl http://5.78.129.127/api/headers/inspect?url=https%3A%2F%2Fexample.com

No signup, no tracking. Would love feedback on what other checks would be useful.