AI Website Security Scanner
Scan any public website and receive a deterministic security score, a full digital-forensics evidence report, and an AI-written analysis of what to fix first.
What Your Report Includes
100% passive & lawful
No exploitation, no port scanning, no vulnerability probing — just the evidence any browser could observe.
Digital-forensics evidence
Raw captured headers, DNS records, TLS certificate details, content hashes and a full fetch timeline.
AI-written analysis
An AI senior-analyst summary of the evidence with prioritised, fix-first recommendations you can act on today.
How the Score Is Calculated
| Category | Weight |
|---|---|
| Security headers (CSP, HSTS, X-Frame-Options…) | 30% |
| TLS / HTTPS posture (cert validity, protocol) | 20% |
| Exposure & hygiene (.env, .git, admin paths) | 20% |
| DNS & email authentication (SPF, DMARC, DKIM) | 15% |
| Web hygiene (security.txt, robots, redirects) | 15% |
The score is deterministic and calculated before any AI involvement — the AI interprets the evidence but never alters the number.
Responsible, Lawful Scanning
This tool performs passive, read-only observations only — the same requests a normal browser makes. All checks are non-intrusive and compliant in spirit with the UK Computer Misuse Act 1990. Only scan domains you are entitled to assess. Results are educational; security posture changes over time, so re-run scans periodically.
Need a deeper audit? Talk to us