Free website security check
See what criminals can see about your website and email, with plain-English fixes. Takes about a minute.
What this website security check looks at
We look at your website and email the way a criminal would when picking a target, using only what's visible from the internet. Nothing is installed and nothing on your website is changed.
- Email spoofing: whether your SPF, DKIM and DMARC settings stop fraudsters sending emails in your name.
- Out-of-date software: the versions of WordPress, PHP and web server software your site reveals, compared with lists of security holes criminals are using.
- SSL certificate and encryption: whether the padlock works, when it runs out, and whether old encryption is still switched on.
- Secure settings: whether visitors are always sent to the secure https:// version, and whether your site gives away which software it runs.
- Domain renewal: when your domain name runs out, because losing it takes your website and email with it.
What do red, amber and green mean?
Red means something an attacker could use today, or several important gaps. Amber means real gaps worth fixing soon. Green means only small tidy-ups. Each item says who should fix it: you, your web designer, your web host or your email provider.
Is a free check enough?
It's a good start. But new security holes are found every week, and certificates and domains run out. Members get automatic re-checks, same-day alerts when a new threat affects them, down alerts every 5 minutes, and an "open door" check of their server once they've proved the website is theirs.
Want us to keep watch for you?
Nimbo Shield re-checks your website and email for you, warns you the same day about new threats and tells you if your site goes down. Try it free for 14 days, no card needed.