Security Scanning
Find common website security and configuration issues before they become bigger problems.
WebInspect provides a fast, external security inspection of your website and domain. Enter a domain to check important security signals including HTTPS, SSL/TLS configuration, HTTP security headers, DNS records, email security controls and other externally visible settings.
No account is required to run the initial inspection, and you can review your results in minutes.
Website security involves much more than simply having an SSL certificate. A website can load correctly over HTTPS while still missing important browser protections, using outdated configuration or exposing information that should not be publicly accessible.
WebInspect performs a series of automated checks against the website and domain from an external perspective.
Depending on what is available for the domain, the inspection can examine areas such as:
The results are organized so that you can identify which checks passed, which require attention and where improvements may be appropriate.
Websites change constantly.
A software update, server migration, DNS change, CDN configuration or new application deployment can introduce security configuration issues even when the website continues to appear completely normal to visitors.
Regular external checks can help identify problems such as missing security headers, expired certificates, outdated TLS support, incorrectly configured email authentication and unnecessary information exposure.
Finding these issues early gives website owners and administrators an opportunity to investigate and correct them.
WebInspect approaches your website in a similar way to an ordinary Internet visitor: from outside your infrastructure.
This makes the inspection useful for identifying security controls and information that are publicly visible without requiring administrator credentials or access to your server.
Because the inspection is unauthenticated, WebInspect does not replace penetration testing, source-code review, authenticated vulnerability scanning or a formal compliance assessment.
Instead, it provides a practical first look at the security posture that your website presents to the Internet.
A security report should do more than simply mark something as passed or failed.
WebInspect provides information about detected issues and why particular security controls matter. More detailed report options provide additional technical information and remediation guidance for users who want help understanding and addressing their findings.
Some findings may require manual investigation because the correct configuration depends on how the website or application is designed.
Some of the security controls examined by WebInspect are relevant to widely used security frameworks and standards, including OWASP guidance and PCI DSS requirements.
Where appropriate, WebInspect can highlight this relevance to help you understand how individual technical findings relate to broader security practices.
These indicators are intended as readiness information and do not constitute certification or confirmation of compliance.
WebInspect is useful for website owners, developers, system administrators, IT teams, agencies and small businesses that want a straightforward way to review externally visible website security controls.
You do not need to be a security specialist to run an inspection.
Start with the free security snapshot and explore the findings for your domain.
Enter your domain and get your security snapshot. No account required.