AttackerView

Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it.

For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on.

The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.