Drop your URL.
A deployed, public HTTPS website. No account, setup, or access to your code.
PUBLIC HTTPS · BOUNDED INSPECTION
You shipped it.
What’s showing?
See the public signals your site sends—and which ones deserve a closer look.
Outside observations.
Useful context. No dramatic verdicts.
THE OUTSIDE VIEWFIG. 01
PUBLIC RESPONSE
01HTTPS connection↗
02Response headers↗
03Cookie attributes↗
Already visible. Worth understanding.
your-website.com+
YOUR NEXT BIG THING
Hello,
world.
world.
Built. Shipped. Out there.↗
SURFACE, MEET SUBTEXT.
ILLUSTRATION · NOT A SCAN↓ LOOK A LITTLE CLOSER
SHIP WITH CURIOSITY.
Your website has a public side.
Get to know it.
A LITTLE VISIBILITY GOES A LONG WAYLess mystery.
Less mystery.
More perspective.
Your site tells the browser more than what’s on the page. We help you read between those lines.
We look from outside.
Bounded, read-only requests to your origin and explicitly referenced browser files.
Get the context.
See what’s observable, why it matters, and where a closer review could help.
INTENTIONALLY FOCUSEDSmall scope.
Small scope.
Clear boundaries.
Public responses can tell you something. They can’t tell you everything.
THE OUTSIDE VIEW · LIMITED BY DESIGNWhat we look at
- HTTPS & transport policy
- Content security policy
- Content type & framing headers
- Cookie attributes, when present
- Bounded initial HTML, referenced JavaScript and one source map
Where we draw the line
No crawling, sign-ins, form submissions, or exploitation. The score covers completed public checks, never overall security.
Reports stay in browser memory. A missing header calls for review, not a verdict on your website.