Cyber Risk Scanner

Enter a website address to check its security headers, TLS certificate, email security (SPF/DMARC) and PHP version against known issues, including the October 2026 PHP2Shell vulnerability. You'll get a risk score card you can download or share.

How this works, and what isn't collected

The domain you enter is checked once, from my server: its public response headers, its TLS certificate on port 443, and its public SPF/DMARC email security records via DNS.
Nothing you check is stored, logged against you, or linked to who you are. No cookies are used by this tool.
The score card and its image are generated in your browser from the result. The score is a rough guide based on these public checks, not a full security audit or an insurance assessment.
I don't track individual visitors to enforce a personal usage limit. Doing that honestly would mean storing something about you, which I won't do. Netlify, my host, applies its own short, automatic rate limit at the network level purely to stop abuse. You'd only notice it if you ran several checks back-to-back.
I'd still suggest checking back roughly monthly, since new vulnerabilities are found regularly. That's just friendly advice, not something enforced.

Not sure what any of this means, or found something worrying?

Alongside insurance broking, I also build and maintain websites. If you'd like a proper look at your site's security and a plan to fix anything this flags, get in touch.