Skip to content

Website Security Tools

Nivaronix’s tools are the same free checkers that power the full website security scanner, broken out one topic at a time. Each one runs a real check against the domain you enter — no account, no email, no simulated results — and returns the specific evidence behind every finding: the response header that was or wasn’t sent, the DNS record that was or wasn’t published, the certificate field that didn’t match.

These are configuration and posture checks, not a vulnerability scanner or penetration test: they look at what your site publicly sends and publishes — security headers, SSL/TLS certificate details, DNS and DNSSEC records, SPF/DMARC email-authentication records, CAA restrictions — and compare it against known-good configuration. They do not scan for malware, exploit known CVEs, or attempt to breach anything.

Run the full scanRead the guides

All tools

  • Nivaronix Check

    Paste a link or scan a QR code before you trust it — checks redirect chains, domain age, TLS, and impersonation patterns, no login or domain ownership required. Anonymous, rate-limited, nothing stored beyond an aggregate signal.

  • Website Security Scanner

    Scan any domain you own for missing security headers, SSL/TLS certificate issues, DNS misconfiguration and email-authentication gaps — results typically in seconds.

  • Security Headers Checker

    Checks the HTTP response headers a site sends and flags what's missing, misconfigured, or deprecated — HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

  • SSL/TLS Checker

    Checks a domain's SSL/TLS certificate for expiry, hostname mismatch, self-signed certificates, untrusted CAs, weak TLS versions, and chain issues.

  • DNS Security Checker

    One scan checks DNS resolution, SPF, DMARC, CAA, and DNSSEC status for a domain, with the raw DNS evidence attached.

  • DNSSEC Checker

    Checks whether a domain has DNSSEC enabled: DS record presence at the parent zone and resolver AD-flag status.

  • CAA Record Checker

    Checks whether a domain publishes a CAA record restricting which certificate authorities may issue certificates for it.

  • SPF & DMARC Checker

    Checks a domain's SPF and DMARC records for missing records, hard/soft-fail policy, multiple-record conflicts, and monitor-only DMARC.

  • Website Security Score

    Explains what a website security score is, how the 0–100 score maps to a letter grade (A–F), and what a low score actually tells you.

Want everything at once?

The website security scanner runs every check above against one domain in a single pass and rolls the results into one security score.

Scan your site for free