Web Security Check

Website security –
at a glance.

Missing security headers, no HTTPS redirect, exposed server versions or open ports – Vernax checks all critical web security parameters.

Only publicly reachable domains are supported.

7Checks
HTTP(S)Method
EUHosting

vernax.app

Example result

82

/ 100

HTTPS / RedirectOK
HSTSOK
Content-Security-PolicyWarn
Security headersInfo
Server informationOK
Open portsOK

What is checked

Transport

  • HTTPS availability
  • HTTP → HTTPS redirect
  • HSTS max-age
  • includeSubDomains

Security header

  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy

Server

  • Server header
  • X-Powered-By
  • Version exposure
  • Open ports

Other

  • security.txt (RFC 9116)
  • robots.txt
  • TTFB (response time)