18 free tools — run individually or as a full scan
Checks SSL certificate validity, expiry, and issuer.
Checks SPF record to validate email sending policy.
Checks DMARC policy for email spoofing protection.
Checks Google Safe Browsing for malware or phishing threats.
Checks IP against Spamhaus, SpamCop, SORBS, and Barracuda.
Checks common DKIM selectors for email authentication.
Checks if a robots.txt file exists and parses crawl directives.
Checks for sitemap.xml and counts indexed URLs.
Checks security headers like HSTS, CSP, X-Frame-Options.
Follows redirect chain and flags loops or excessive hops.
Retrieves WHOIS data including domain registration date.
Resolves IP address and retrieves hosting location and ISP.
Fetches A, AAAA, MX, NS, TXT, and CNAME records.
Detects CMS, framework, CDN, and analytics tools from HTML and headers.