Security scan · free · no account needed
Is your website really secure?
Automated attacks look for the same weaknesses on every website: a missing header, an expired certificate, a domain anyone can send email from. Find out in about a minute whether yours has any of them — free, read-only, nothing to install.
- No account, no credit card
- Score and findings in about 60 seconds
- Fixes in plain language
HTTPS availabilityCertificate & protocolHTTP → HTTPS redirectSecurity headersCookie protectionEmail spoofing protectionCertificate authority restrictionsTechnology exposureVulnerability disclosure policyPage content analysisSEO essentialsWebshop essentialsCompany researchAccessibility (WCAG 2.1 AA)GDPR & cookies
How it works
Security shouldn't require a cybersecurity degree.
TitanScan Pro turns the checks a security consultant would run first into one score and a list of things to do, in the order they matter. Four steps, no jargon, nothing touched on your site.
01
Scan
Type in your address. We check the security setup your site shows to the whole internet — the same things an attacker's tools look at first.
02
Understand
Get a score out of 100 and every finding in plain language, with why it matters for your business — not a wall of jargon.
03
Fix
Follow step-by-step instructions written for your platform, whether that's WordPress, Shopify, Webflow or custom code. Or forward them to whoever built the site.
04
Verify
Run the scan again and watch the score move. Every fix you make is checked, so you know it actually landed.
What we check
Twenty-two checks, eight areas.
The same checks browsers, email providers and attackers' tools apply to your site — run in the same order every time, so a score means the same thing today as it did last month, and an improvement is real.
Encryption & certificates
3Chain, hostname, expiry, TLS version
Browser security headers
6HSTS, CSP, framing, MIME, referrer
Cookie protection
3Secure, HttpOnly and SameSite attributes
DNS configuration
1CAA records and resolution
Email spoofing protection
3SPF, DMARC and MX records
Security configuration
2security.txt, HTTP → HTTPS redirect
Information exposure
2Server, framework and CMS versions
Page content safety
2Mixed content, insecure forms, errors
The report
You watch it work.
Then you get the fixes.
The scan runs in front of you — every probe announces itself and reports back. When it finishes you have your score and the first findings, free. The full report is where the fixes live: one payment, no subscription, yours to forward to whoever maintains the site.
Every finding, unlocked
Not a teaser. All issues found, ordered by how much they actually matter.
The evidence
The exact header, record or response that triggered each finding — so your developer can verify it.
Step-by-step fixes
Written for your stack, with the config to paste, not a link to a spec document.
A PDF you can forward
For the developer, the agency, or the client who asked whether you're secure.
scan — yourcompany.nl
titanscan scan --target yourcompany.nl --read-only
resolving yourcompany.nl …
handshake ok · 22 checks queued
[ ok ] tls.certificate · valid · 61 days left
[ warn ] headers.security · 3 issues
[ ok ] cookies.flags · clean
[ warn ] email.auth · DMARC missing
[ ok ] dns.caa · clean
— scan complete in 47s —
10 issues found across 22 checks
Pricing
Simple, honest pricing.
The scan is free and always will be. Pay once for the full report when you want the fixes — less than an hour of a developer's time, and no subscription.
One-time
Full Security Report
Every finding, the evidence behind it, and step-by-step fixes written for your platform. Delivered instantly, with a PDF you can send to your developer or agency.
All findings unlockedTechnical evidencePrioritised action planDownloadable PDF
Site Monitor
Or keep watching it.
We run the whole scan again every month and email you every score and anything new: a plugin update that broke a header, a new tracker, an expiring certificate. Every report is included, every month.
- ✓The full scan every month
- ✓All 6 reports, every month
- ✓Email when something changes
- ✓Stop any month
For agencies
Every client site.
Checked for free.
If you build or maintain websites for other people, these questions land on your desk whether or not you sold them. Today: scan any client site for free and buy the report per site, or put a site on monthly monitoring. Coming: one account for all your clients, with your own logo on the report.
- Free scan for every client site
- Reports per site, no subscription
- Every scan: security to GDPR
- Monthly monitoring per site
- SoonClient dashboard
- SoonWhite-label PDF reports
Agency planComing soon
Up to 50 sites
Running more than a handful of client sites? Tell us what you need and we'll set you up first when the agency plan opens, and help with volume in the meantime.
Talk to usRead-only by design
We can't break your site.
That's the point.
TitanScan Pro makes the same kind of requests a browser makes: it fetches pages, reads response headers and looks up DNS records. It never logs in, never submits a form, never guesses a password and never sends anything designed to change or disrupt what you have running. Your visitors won't notice, and neither will your hosting bill.
No credentials
The scanner has no login and cannot get one. It sees exactly what the public sees.
No payloads
No injection, no fuzzing, no brute force. Nothing that could trip a firewall or fill your logs.
Identified traffic
Every request carries our User-Agent, so you can find us in your access log and block us if you want.
TitanScanSecurityScanner/1.0 (+https://titanscanpro.com/security)
Questions
Before you scan.
Will this break my website?
No. Every request is one a normal browser makes — fetching pages, reading headers, looking up DNS. Nothing is submitted, guessed, brute-forced or changed. The scanner cannot log in, and it never tries.
Do I need technical knowledge?
No. The score and the findings are written in plain language. The technical detail is there underneath if you want to hand it to a developer, but you don't need to read it to know what to do.
What do I get for free?
The full scan, your score out of 100, a pass/fail overview of every area, and the first findings written out in full. The complete report — every finding, the evidence and the step-by-step fixes — is a one-time purchase, with no subscription.
How long does a scan take?
About a minute. You watch the checks run live rather than staring at a spinner.
Is there a limit on free scans?
From one connection you can scan the same website up to five times in 48 hours — check, fix, check again — but at most two different websites. That keeps bots and bulk scanning out without getting in the way of anyone checking their own site. Scans that fail to run don't count.
Can I scan a site I don't own?
Only scan sites you own or have permission to scan — that's in the acceptable-use terms. The checks are passive and public, but permission is still the rule.
Find out in sixty seconds.
One scan, no account, nothing installed. If everything is fine, you will know that too — and that is worth knowing before a customer, or an attacker, finds out first.
Read-only by design · results in about a minute · titanscanpro.com
One scan is one view
Scan the rest of your business.
Live
SEO
Titles, descriptions, headings, indexing, sitemap and sharing tags.
Free scan · report €29.95
Live
Accessibility
Contrast, alt text, labels and keyboard use, tested against WCAG 2.1 AA.
Free scan · report €39.95
Live
GDPR / privacy
Cookies and trackers before consent, third parties, banner and privacy policy.
Free scan · report €29.95
Live
Competitors
Your site side by side with up to three competitors, on every score.
Free scan · report €29.95