Website security check
Check the browser-facing security basics your website should have.
WebMendly reviews HTTPS and common HTTP security headers as part of a broader website health audit, then identifies missing protections that deserve review.
HTTPS is the baseline
WebMendly verifies whether the audited URL is served securely over HTTPS, an essential requirement for protecting traffic and maintaining browser trust.
Review common response headers
Security headers can reduce exposure to content injection, framing and MIME-related risks. WebMendly checks for several widely used headers and flags missing protections for review.
A security check is not a penetration test
WebMendly provides a website-health security review, not vulnerability exploitation, malware scanning or a substitute for a professional penetration test.
Frequently asked questions
Is this a vulnerability scanner?
No. WebMendly checks website-health security signals such as HTTPS and common headers. It does not attempt exploitation or penetration testing.
What is HSTS?
HTTP Strict Transport Security tells compatible browsers to use HTTPS for a site after the policy is received.
What is Content-Security-Policy?
CSP is a browser security mechanism that can restrict which resources a page is allowed to load and execute.
Check your website security basics
Enter a URL and WebMendly will score the site, surface the most important findings, and show you what to fix first.
Audit your website