Your website's security grade · HTTPS · TLS · DNS · Email · Technology
A CyberScore scan looks at the parts of your site attackers probe first. Here is what each area means, why it matters, and the common mistakes — with an in-depth guide for each one.
Response headers like HSTS, Content-Security-Policy and X-Frame-Options tell the browser how to protect your visitors — forcing HTTPS, blocking injected scripts and stopping clickjacking. Missing headers are the most common issue we find, and usually the quickest to fix.
Read the guide →HTTPS is only as strong as the TLS configuration behind it. Old protocol versions, weak ciphers or a certificate without forward secrecy can quietly undermine the padlock. Our Deep TLS tab grades your setup the way SSL Labs does.
Read the guide →If your domain has no SPF, DKIM and DMARC records, anyone can spoof email "from" your business. These three DNS records let receivers verify your mail and reject forgeries — essential for deliverability and anti-phishing.
Read the guide →Records such as CAA restrict who can issue certificates for your domain, and DNSSEC protects against tampering. Small DNS details close off whole classes of attack before they start.
More guides →Before you click a suspicious link, CyberScore checks it against threat-intelligence sources and renders a safe server-side preview — so you can judge a page without visiting it yourself.
More guides →Your score out of 100, the letter grade and the High/Medium/Low counts are a quick health check. The remediation plan then tells you exactly what to change, in priority order, with references.
More guides →Yes — scanning is free and needs no signup. You type a domain or URL and get a graded report in seconds. There is nothing to install.
CyberScore performs only passive, non-invasive checks: it reads HTTP headers, inspects the TLS handshake and certificate, looks up public DNS records and public technology fingerprints. It never attempts logins, exploits or intrusive probing. You should still only scan sites you own or are authorised to test.
It summarises how well the site follows current security best practices across all checked areas. 90+ is excellent, 80–89 good, 60–79 needs improvement, and below 60 is poor. The letter grade and the severity counts give you the same picture at a glance.
Every report ends with a prioritised remediation plan explaining why each issue matters and the exact steps to fix it. The guides above go deeper on each topic. You can also download the full report as a PDF to share with your developer or host.
Re-scan after any change to your server, certificate, DNS or hosting, and otherwise every few months. Configurations drift over time, and certificates and protocols are updated regularly.