Free website security scanner
TLS, headers, DNS, email records, reputation, and exposure. One score, one priority list.
RedScore runs a passive outside-in check on any domain. No install, no signup, and no invasive testing. You get grades across ten security areas and a short summary of what to fix first.
Scan your domainFree scan · No signup · Results in ~60 seconds · Opens /lookup
example-corp.com
✓ scan complete · grade D · 4 issues
AI summary
DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.
Why scan your website
Headers, certificates, DNS records, email auth, and exposed services are visible from the internet. RedScore collects those signals into a single score so you are not guessing which issues matter most.
What the scanner covers
RedScore reads the same data browsers and scanners can already see. Nothing is modified on your site.
Enter any domain and get results in about 60 seconds without creating an account.
No agents, no server access, and no exploitation attempts. Only publicly visible configuration.
DNS, email, web headers, TLS, cookies, exposure, certificates, reputation, and more in one report.
Each finding explains what failed, why it matters, and what to do next in plain English.
What you get
Your scan returns a 0-100 RedScore, letter grades per category, and a prioritized summary. Claim your domain to unlock full finding detail and ongoing monitoring.
63 / 100
Grade C
example-corp.com
AI summary
Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.
Go beyond one scan
Free scans show your score and category breakdown. Domain owners can claim their site to see complete findings, schedule rescans, and get alerts when public posture changes.
FAQ
