Web Scanner: Broken Link Checker & Security Audit

Find broken links and run passive security checks on sites you choose: headers, cookies, forms, scripts. Results stay local.

Web Scanner checks a site you choose for broken links and for its basic security settings, from your browser. BROKEN LINKS - Follows the links inside the site and checks each link once. Links to other sites are checked once and never crawled; you can turn them off. - Lists every broken link with the pages it is on and the link text. "Open page" opens that page with the broken link outlined. - Shows each redirect hop by hop, with the status of every step. - Scan settings: delay between requests, pages checked at once and paths to skip, so you can scan gently. SECURITY GRADE - HTTPS, the redirect from HTTP, and Strict-Transport-Security. - Security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. - Cookie flags: HttpOnly, Secure, SameSite. - SPF and DMARC records of the domain, against email spoofing. - Files that should not be public, such as .env, .git/ or source maps, plus robots.txt and security.txt. - Script libraries with known versions, and API paths found in scripts. Issues come in plain words, sorted into "Fix these first" and "Then". A site without HTTPS can't score above C. PASSIVE AND PRIVATE Web Scanner sends ordinary requests, the same a browser sends when you open a page. It never sends attack payloads. It has no account, no analytics and no ads. It asks for access to a site when you start the first scan, not when you install it. It talks only to the sites you scan, to Cloudflare's public DNS for SPF and DMARC lookups, and to Lemon Squeezy to check a Pro license. Results and history stay in your browser. FREE - Link scans up to 150 URLs each. - Every broken link with its pages and link text, and redirect chains. - The security grade and the full issue list. - One sample finding with its evidence and fix, from a demo scan of example.com. - Popup, side panel or a full tab. English and Turkish, dark and light themes. PRO LIFETIME ($9.99, one-time payment) - No URL limit per scan. - Scan a sitemap.xml or a list of URLs instead of crawling. - The evidence, why it matters and the fix for every finding. Ready-to-paste fix code for your web server or framework; some fixes are an HTML tag or a DNS record. - Whole site: the security check on every crawled page (up to 200), showing which pages share each issue. - Client report with your name or logo, printed or saved as PDF, in English or Turkish. - Send to developer (a plain-text summary with the fix code), CSV and JSON export. - History of past scans, with what changed after a rescan. - Network Inspector for the scanned site. One license works in up to 5 browsers. Refund within 14 days of purchase. Guide: https://webscanner.onderbakir.com/guide Privacy policy: https://webscanner.onderbakir.com/privacy Support: https://github.com/onder007/web-scanner/issues