Free website security checks
Each check below is part of one free BadgerScan scan. Pick the one you came for, or just run the full scan and get them all at once, in plain English.
Free SPF and DMARC Checker: Can Someone Spoof Your Email?
Use this free SPF and DMARC checker to read your SPF, DKIM and DMARC records, see if your domain can be spoofed, and fix a p=none policy.
Free Security Headers Checker: Test HSTS, CSP, and More
Check your site's HTTP security headers free: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. See what is missing and how to fix it.
Free SSL Certificate Checker: Validity, Expiry, Chain, and TLS Version
Use our free SSL certificate checker to confirm validity, expiry, trust chain, and TLS version. Part of one passive external scan from BadgerScan.
Free WordPress Vulnerability Scanner
Free WordPress vulnerability scanner. We match your publicly-detectable versions to known CVEs; Pro reads exact plugin, theme, and core versions inside.
Free DNS Checker: See What Your Domain's DNS Reveals
Free DNS checker. See your A, MX, CAA, TXT and nameserver records, what they reveal to the public, and the common misconfigurations to fix. Part of one free scan.
Exposed Files Checker: Find Publicly Reachable Backups and Config Files
Find publicly reachable backups, config samples, version files, and open directory listings before attackers do. Part of BadgerScan's one free external scan.