Check an app before you sign up
Type in any web app's address. In under a minute you'll see what anyone visiting it can see: whether the connection is encrypted, who handles payments, which other companies load when you visit, and more. Free, and nothing is saved.
Built the app yourself? Run it here too. Once you prove the site is yours, you'll also see the problems only an owner should see, with how to fix them.
We load the page the way your browser would and read what it sends. Nothing you type or we find is saved.
What the free check looks at
- EncryptionWhether every page uses HTTPS, and browsers are told to.
- PaymentsWho handles card details, and whether the app ever sees them.
- Outside companiesEvery other service that loads when you visit, and what it’s for.
- Privacy policyWhether there is one you can find.
- A way to reach themA contact or a security address for reporting problems.
- How new it isWhen the web address was first registered.
Your own site? Prove it, and see more
Add a short code to the site and the check adds what only an owner should see, with how to fix each one. Nobody else is shown these.
- Keys in public codePrivate keys in the pages or scripts anyone can download.
- Leftover filesFiles like .env or .git that shouldn’t be public.
- Source mapsWhether your original code can be rebuilt from the site.
- Protective headersThe headers that stop framing and content tricks.