Checks your website for common security gaps: encryption, security headers, exposed versions and open files. Non-invasive, no sign-up.
Only a few harmless requests to public addresses — no attack, no load.
WEBINEX hardens your website — security headers, WordPress lockdown, monitoring. Built secure, all from one team.
Free consultationMost websites are not hacked by targeted attackers but by automation: bots crawl half the internet looking for known weaknesses — outdated software, visible version numbers, missing security headers or publicly reachable configuration files. Close these basics and you fall through the net of most attacks.
Our free security check tests exactly these fundamentals: Is your site fully encrypted (HTTPS)? Are the most important security headers like Content-Security-Policy and HSTS in place? Does your site needlessly reveal the software version it runs on? Are sensitive files like .git, .env or backups publicly accessible? For WordPress sites we additionally check typical weak spots such as open user lists and active XML-RPC.
The check is non-invasive: it only sends a few harmless requests to publicly reachable addresses — just like a browser. There is no attack, and it puts no load on your server. Use this tool only for websites you own or are authorised to manage.
No. The check only reads publicly available information — security headers, visible versions and whether certain addresses are reachable. It does not attempt to break into the site and puts no load on the server.
A low score does not mean you have already been hacked — it means your attack surface is larger than it needs to be. Most of these issues can be fixed quickly and without risk.
Yes. Encryption, security headers and exposed files are checked for every website. The WordPress-specific tests only run when WordPress is detected.
WEBINEX hardens websites professionally: security headers, WordPress lockdown, update and backup strategy, plus monitoring. Download the PDF report and contact us — no strings attached.
We use cookies for anonymous statistics (Google Analytics) to improve our website. Details in our privacy policy.