Website Security & Privacy Scanner

About

Your browser has almost no opinion about where it sends your data. A page loads, trackers fire, cookies get set without the right flags, and a login form submits your password over plain HTTP — none of it visible, none of it flagged.

The Website Security & Privacy Scanner shows you what's actually going on. Load a page, get a risk score from 0 to 100, and see exactly what triggered it.

It checks the things that matter: whether your connection is properly encrypted, whether the site set security headers like CSP, HSTS, and X-Frame-Options, and whether any forms on the page are submitting credentials over unencrypted HTTP (more common than you'd think).

On the privacy side, it matches scripts and resources against 100+ known trackers — Google, Meta, Amazon, and a long tail of smaller ones — and looks for 1×1 tracking pixels and cookie configurations that leave sessions exposed.

It also flags requests to bare IP addresses, phishing-style domain patterns, and unsandboxed iframes that third-party embeds sometimes sneak in.

Findings go into a dashboard with the score, specifics behind each warning, and a local scan history. The scan runs entirely on your machine.