Free · Passive scan · No authentication required

Compliance Scanner

Scan your website's security headers and DNS configuration. Get an instant report mapped to NIS2, ENS and ISO 27001 controls.

HTTPS enforcementHSTSContent-Security-PolicyX-Content-Type-OptionsClickjacking protectionReferrer-PolicyPermissions-PolicyCookie flagsDNSSECInfo leakage

I confirm that I am the owner or authorised administrator of this domain and I accept the Terms of Use and Responsible Use Policy. Scanning domains you do not own or control is prohibited.

How it works

Enter your domain

Type your website URL. We normalize it and generate a unique verification token for your domain.

Verify ownership

Add a DNS TXT record, meta tag or file to prove you control the domain. This protects third parties and keeps our IP off blacklists.

Get your report

We passively analyse HTTP headers and DNS configuration — no login, no crawling — and map findings to NIS2, ENS and ISO 27001 controls.

This scanner performs a passive analysis of publicly accessible security headers and DNS records. It does not attempt logins, crawl pages beyond the homepage, run exploits, or store personal data. It is not a substitute for a penetration test or a full security audit.