BadgerScan: free website security scan by CyberBadger
Run a free website security scan: DNS, email security, TLS, and HTTP headers, graded in seconds. No login required.
Passive checks only. We read public data and never test or exploit your site.
By scanning, you confirm you are authorized to assess this domain and agree to our Terms and Privacy Policy.
Frequently asked questions
Is BadgerScan free?⌄
Yes. The external scan is completely free with no login or signup, and you can get a full PDF report or free monthly monitoring by email. BadgerScan Pro (the WordPress plugin) is C$10/mo per site, and the plugin itself is a free download you can run standalone.
Is the scan safe? Will it affect my website?⌄
Yes, it's safe. BadgerScan is fully passive. It only reads publicly available data like DNS, certificates, HTTP headers, and public files. It never logs in, tests, or exploits your site, and won't slow it down.
What does BadgerScan check?⌄
DNS records and CAA, email security (SPF, DMARC, DKIM, MTA-STS), TLS certificate and protocol, HTTP security headers, cookie flags, exposed public files, subdomains from Certificate Transparency logs, technology fingerprint, and known CVEs.
What is BadgerScan Pro?⌄
BadgerScan Pro is a free WordPress plugin that adds the authenticated, inside view a public scan cannot reach. Alongside the external scan, it checks what is actually installed (exact plugin, theme, and core versions, admin and configuration settings, core-file integrity, and the specific CVEs for your versions), then combines both into one report with history, automatic daily scans, and email alerts when something changes. It is C$10 per month per site (or C$100 per year), plus tax.
How accurate is the letter grade?⌄
The grade reflects your external, internet-facing posture only. It's a strong first signal, but a full picture also needs the authenticated view of your site (BadgerScan Pro, a WordPress plugin) and a full on-site review of your systems, policies, and staff (BadgerAudit).
Do you store my data?⌄
We process your domain's public data to produce the report. We only keep your email if you request a report or enable monitoring, and you can unsubscribe at any time. See our privacy notice.
Who is behind BadgerScan?⌄
CyberBadger, a Canadian cybersecurity company that protects small and medium businesses.