Enter any website address and Strike Force will run 20 passive checks for the most common security weaknesses, no login, no installation, nothing sent to the site except normal page requests. Powered by Strike Force · 7Chats
Website Security Check
Strike Force - Cybersecurity
What gets checked
- HTTPS availability
- HTTP → HTTPS redirect
- TLS certificate validity & expiry
- HSTS header
- Content Security Policy
- Clickjacking protection (X-Frame-Options / frame-ancestors)
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
- Server header version disclosure
- X-Powered-By disclosure
- Cookie Secure / HttpOnly / SameSite flags
- Mixed content
- CORS misconfiguration
- CMS version disclosure (generator tag / readme.html)
- XML-RPC exposure
- REST API user enumeration
- Exposed sensitive files (.env, .git, backups, debug.log…)
- Directory listing
- security.txt presence
