Security Tools - Complete Check
Run every Security Tools check at once and get one combined report.
What the Security Tools Complete Check Covers
The security complete check reads the HTTP response headers the site sends and scores its browser-side protections: HTTPS redirection, HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, CORS and mixed-content safeguards.
When to Use It
Use it when hardening a new site, after changing web server, CDN or proxy configuration (which can silently drop headers), or when preparing for a security review or penetration test.
Reading the Results
A missing header is not proof that a site is vulnerable - it means the browser is not being told to apply that protection. The hash generators, JWT decoder and password strength checker in this category work on text you enter rather than on a domain, so use them from their own tool pages.
Tool Categories
Individual Tools
Every tool below also remains available on its own.