Website security check
Look up a public site’s Mozilla Observatory grade for security headers. It is not a trust or scam score.

Details
Type a public site name to see its Mozilla Observatory grade for security headers. The hostname is sent to that public service. Local names and IP addresses are refused. The grade is not a malware scan, not a phishing check, and not a reason to enter a password.

Category: Security
Page: /tools/website-security-check
Text: /tools/website-security-check.txt

Limits
This is not a malware, phishing, or company-trust rating. A high grade does not mean a site is safe to pay or to give a password. The hostname is sent to Mozilla's public Observatory API. Local names and IP addresses are refused.

Steps
1. Enter a site such as example.com.
2. Read the grade, score, and algorithm version.
3. Open the Mozilla report for the full test list.

Questions
What does the score mean?
Observatory starts at 100. Missing defenses subtract points. Bonus points are added only if the score is still 90 or higher. The grade bands are Mozilla's.

Is the score from today?
The page shows the algorithm version and scan time returned by Mozilla. A fresh scan is requested, and their service may reuse a recent result for about a minute.

Does a low grade mean the site is a scam?
No. It means the homepage is missing headers or HTTPS behavior that Observatory checks.