SSL/TLS checks
Review the scanner’s HTTPS and certificate observations for your domain. Use the reported detail to investigate configuration or certificate issues.
This is not a complete TLS protocol or cipher-suite audit.
Features / Available now
Know what you’re checking.
A focused external scan, with observations you can inspect and evidence you can pass on.
Security headers
See the header checks returned by the scanner and their individual outcomes. A missing header needs context: pages, redirects and applications may behave differently.
One scanned endpoint does not establish coverage across every route.
Email authentication
Review externally observable email-security signals for the submitted domain, then confirm the findings with your mail administrator.
This does not inspect mailboxes, messages or users’ passwords.
Share and export
Existing scan links let you share a result. The full scanner adds a JSON export so you can retain the returned evidence. Treat result links as shareable.
Open the full scanner →Compare after a change
Explicitly save a baseline in your browser, then compare check outcomes after a later scan of the same domain and framework. Browser storage is not an account-backed history.
Read comparison limitations →What’s planned
These are roadmap items, not features you can purchase today.
| Feature | Status | What must come first |
|---|---|---|
| Account-backed scan history and monitoring | Planned | Domain ownership verification and reviewed access controls |
| PDF and email reports | Planned | Private report access, recipient verification and delivery controls |
| Password breach checking | Planned | Privacy-preserving design; never send a plaintext password to Security8 |
| Paid subscriptions | Planned | A working monitored service and reviewed billing implementation |
Start with your website.
Check its external security signals. No account or card required.