Website security check
Look up a public site’s Mozilla Observatory grade for security headers. It is not a trust or scam score.
This is not a malware, phishing, or company-trust rating. A high grade does not mean a site is safe to pay or to give a password. The hostname is sent to Mozilla's public Observatory API. Local names and IP addresses are refused.
Type a public site name to see its Mozilla Observatory grade for security headers. The hostname is sent to that public service. Local names and IP addresses are refused. The grade is not a malware scan, not a phishing check, and not a reason to enter a password.
- 1Enter a site such as example.com.
- 2Read the grade, score, and algorithm version.
- 3Open the Mozilla report for the full test list.
The score is Mozilla HTTP Observatory, the current public header scan. It starts at 100. Penalties apply first. Bonuses apply only if the score is still 90 or higher. It is not a malware, phishing, or business-trust rating. A high grade does not mean the site should be given a password.
Questions
- What does the score mean?
- Observatory starts at 100. Missing defenses subtract points. Bonus points are added only if the score is still 90 or higher. The grade bands are Mozilla's.
- Is the score from today?
- The page shows the algorithm version and scan time returned by Mozilla. A fresh scan is requested, and their service may reuse a recent result for about a minute.
- Does a low grade mean the site is a scam?
- No. It means the homepage is missing headers or HTTPS behavior that Observatory checks.
Related
Encrypt a fileChoose files or a folder, set a password, and download the encrypted files plus a key that must stay in the same folder.
SHA-256 checksumHash a local file so you can compare it to a published checksum.
What's my IPShow the public IP address seen for this browser and a city-level location guess.