Free tools

Free website security tools

Quick, single-purpose checks you can run without an account. Each one looks at one thing; a Webforta scan checks 40+ things on a website you verify and can re-check them on a schedule.

Security headers checker

Grade a site's HTTP security headers from A+ to F, with a copy-paste fix for each missing one.

SSL certificate checker

Check that HTTPS works, when the certificate expires, who issued it and which names it covers.

WordPress plugin vulnerabilities

Look up known security issues for any WordPress plugin and check whether your version is affected.

security.txt generator

Create an RFC 9116 security.txt file so researchers know how to report issues to you.

Want it checked for you, every day?

Add your website to Webforta for a full scan, uptime and certificate monitoring and alerts when something changes.