Website Security Scanner

Provides a real-time security report for websites with an overall trust score based on multiple security checks

Get a clearer picture of a website’s security with Website Security Scanner. Run an on-demand assessment of the website in your current tab. Review individual findings, an overall assessment score, scan coverage, and practical recommendations. SECURITY CHECKS • HTTPS usage and TLS certificate configuration • Google Safe Browsing checks for the site origin • VirusTotal domain reputation • SPF and DMARC email authentication • Security headers and potentially weak header values • Public directory listings • HTTP resources referenced by HTTPS pages • Potentially unsafe password and form submissions REPORTS THAT ARE EASY TO USE • View results in a refreshed, modern interface • Save up to 50 scan reports locally • Search history and compare previous results • Export reports as JSON or standalone HTML • Follow scan progress, cancel a scan, and return to it after closing the popup • Reuse recent results or run a fresh scan • Choose which checks to run • Display an optional score badge on the toolbar • Delete individual reports or clear all scan data YOU CONTROL EXTERNAL LOOKUPS External security services are disabled by default. When enabled, the extension sends the site hostname to SSL Labs, Google Public DNS, and VirusTotal, and the site origin to Google Safe Browsing. The scanned page’s path, query string, and fragment are not sent to these providers. Google Safe Browsing and VirusTotal require your own eligible API keys. Other checks work without those keys, subject to availability and your selected settings. Directory probing requires separate opt-in and should only be used on websites you are authorized to test. PRIVACY AND LIMITATIONS Settings, API keys, and optional report history are stored locally in your browser. The extension includes no advertising, analytics, or developer-operated collection server. Scores reflect completed checks only. Coverage shows how much of the assessment was completed. Results may be incomplete or outdated and do not guarantee that a website is safe. Domain reputation checks are not a vulnerability audit. Requires Chrome 120 or newer.