LynxRadar: Website Security Scanner

Instant security posture scores for any domain. Checks TLS, DMARC, security headers, breaches, and CVEs in seconds.

LynxRadar gives any website a security grade from A+ to F, right from your browser toolbar. Click the LynxRadar icon on the site you're visiting. Within 20 to 30 seconds you'll see a score out of 100, a letter grade, and a short list of what the site does well and where it falls short. LynxRadar is free: sign in with Google once, and every scan after that is one click. WHAT IT CHECKS Each scan looks at five parts of a site's public setup: • Certificate and encryption: whether the site's TLS certificate is valid and its connection settings are up to date. • Email protection: whether the domain uses DMARC, SPF and DKIM to stop others from sending email that pretends to come from it. • Security headers: whether the site sends the settings that help your browser block common attacks. • Past breaches: whether the domain appears in known data breach records. • Known vulnerabilities: whether the site's software has publicly reported security flaws. HOW GRADES WORK 90–100 is an A, 80–89 a B, 70–79 a C, 60–69 a D, and below 60 an F. After a scan, the grade also appears on the toolbar badge for that tab: green is healthy, yellow means warnings, red means problems. THE RESULTS The popup shows the grade, how many checks passed or need attention, and the top findings explained in plain English. You can copy a text summary, rescan (once every 10 minutes per domain), or open the full report on lynxradar.com for guidance on fixing each issue. Results are saved on your device for 7 days, so repeat visits load instantly. OPTIONAL AUTO-SCAN Turn on auto-scan from the popup and each site you open is graded on the toolbar badge automatically. It's off until you enable it, and you can turn it off at any time. When you enable it, Chrome asks for permission to read your browsing history, because LynxRadar needs each page's address to know which domain to grade. PASSIVE CHECKS ONLY LynxRadar only reads information that is already public, such as DNS records, the site's response headers, certificate logs and breach records. It never sends test attacks and never touches a site's internal systems. PRIVACY • Sign-in: Google shares your name, email address and profile picture with LynxRadar to create your free account and to contact you about it. LynxRadar checks Google's sign-in token once and does not keep it. The extension stores your name, email and profile picture on your device so you stay signed in. • Scans: only the domain name (for example, example.com) is sent to LynxRadar, never the full page address or page content. Scans are not linked to your account. • LynxRadar does not read page content, inject scripts into pages, or sell data. PERMISSIONS • activeTab: see the current tab's address when you click the icon • storage: remember your sign-in and cached results • identity: sign in with Google • Access to lynxradar.com: run scans and confirm your sign-in • tabs (optional, auto-scan only): see each page's address as it loads GETTING STARTED 1. Install LynxRadar and pin it to your toolbar. 2. Open any website and click the LynxRadar icon. 3. Sign in with Google (first time only). 4. Read the grade, or open the full report for details. Grades reflect publicly observable security signals and are one input among many when deciding whether to trust a website.