Security Checker

Is your website secure and up to date?

Find out what technology your website runs on, whether its PHP version is still supported, and how its HTTPS, certificate and security headers stand up — explained in plain English, in seconds, with no account needed.

Free to use. No account required.

Check my website, free

Website technology

Whether your site appears to run on WordPress, Joomla, Drupal or another platform, and whether there is public evidence of PHP.

PHP version

If your server reveals its PHP version, it is compared with PHP's official support dates and security advisories. If not, we show you how to check.

HTTPS & certificate

Whether your site uses a secure connection, redirects visitors to it, and has a valid certificate that is not about to expire.

Security headers

Browser security settings such as HSTS, Content Security Policy and clickjacking protection, plus software details your site gives away.

Frequently asked questions

Yes. It is passive and non-intrusive: it makes a few ordinary requests to your home page, like a visitor's browser, and reads what is publicly visible.

No. It is a preliminary external assessment, not a full vulnerability scan or security certification, and it tells you honestly when something cannot be checked from outside.

No. Enter your website address and get results in seconds.

Ready to try Security Checker?

Free to use. No account required.

Check my website, free