A bot doesn’t need long to find a way in.
Type your address. In thirty seconds we look at your site from the outside, the way an attacker would: certificate, headers, outdated software, open logins.
Passive check only: we read what any browser can see. We never try to break in. Methodology
Waiting for an address…
pelda-webshop.co.uk
Sample resultSecurity score
critical
0serious
3medium
4fine
9Most likely way in
// Findings
// What’s already fine
Let’s close the gaps.
Weblock Group website care: security scanning, updates tested on staging, daily backups, and immediate action if anything goes wrong.
From £49 a month
What we check
Certificate and HTTPS
Is it valid, when does it expire, and does the site redirect to the secure version.
Security headers
Six headers that protect visitors from injected code and clickjacking.
Outdated software
Whether your WordPress, server or JavaScript library version is on show.
Open doors
Whether the login page and XML-RPC are reachable for password-guessing bots.
Email spoofing
Whether SPF and DMARC stop others sending mail in your name.
Exposed data
Email addresses in the source, weak cookies, mixed content.