Vigil: Website Security Grade

Grade the site you're on in seconds: security headers, TLS, cookies, known CVEs and email spoofing, with a fix for every finding.

Click the Vigil eye on any website and get an A–F security grade in seconds, with a plain-English fix for every problem it finds. WHAT IT CHECKS • Security headers: HSTS, Content-Security-Policy, clickjacking protection, MIME sniffing, Referrer-Policy and more • HTTPS and TLS: plain-HTTP pages, missing redirects, invalid or expiring certificates, obsolete TLS 1.0/1.1 • Cookies: missing Secure, HttpOnly and SameSite flags • Known vulnerabilities: software versions the site reveals matched against the National Vulnerability Database • Information disclosure: version banners in headers and page markup • Email spoofing: missing or weak SPF and DMARC records WHAT YOU GET • A 0–100 score and A–F grade • Every finding ranked by severity, with what's wrong, the evidence, and exactly how to fix it • A full online report and a ready-to-share PDF PASSIVE AND PRIVATE BY DESIGN • Vigil only reads what the site already shows every visitor. It never probes for hidden files or sends attack payloads. For a deeper audit of a site you own, the extension links to the full scanner. • It does nothing until you click the icon, and never runs in the background. • Only the site's address (like https://example.com) is sent, never the page path, its content, your cookies or your browsing history. • No account, no ads, no tracking.