Website Security Inspection · Compliance · Performance · Email Authentication
Security scanners give you data. WebInspect gives you answers.
Scan your website for SSL/TLS vulnerabilities, HTTP security headers, DNS configuration, SPF, DKIM, DMARC, cookie security, CORS misconfigurations, and potential information or infrastructure exposure. Get clear, prioritized findings with actionable recommendations and relevant OWASP Top 10 and PCI DSS context.
Domain Toolkit
Run any DNS or domain tool from a single input. No jumping between pages.
NEWTool Advisor
Describe what you are trying to fix and our advisor will point you to the right tool.
POPULARSecurity Header Check
Scan for HTTP security headers and get a plain-English diff after any change.
Live
Recently inspected domains, ranked by security score.
Only websites scoring 75+ make it to the board. Will yours? Check yours now for free →
Plans
Start with a free inspection, upgrade to any tier from your results.
Know where your site stands in 60 seconds. An instant security snapshot of your domain (no signup required).
Hand your developer a prioritized fix list, not a raw scan. Expert explanations and practical guidance for developers and technical teams.
Includes everything in the Basic inspection. Available from your results page.
The exact lines to paste, matched to your provider and your stack. You don't need to work out what to change, just where to paste it.
Includes everything in the Technical Report. Available from your results page.
A security consultant reads your results and tells you what actually matters. Manual validation, adjusted priorities and a tailored action plan, signed by the consultant who wrote it.
| Basic Free | Technical €15 | Guided €35 | Expert Review €100 | |
|---|---|---|---|---|
| Technical findings | ✓ | ✓ | ✓ | ✓ |
| Security & Compliance Readiness | ✓ | ✓ | ✓ | ✓ |
| Risk explanations | — | ✓ | ✓ | ✓ |
| PCI DSS & OWASP relevance | — | ✓ | ✓ | ✓ |
| Step-by-step fix instructions | — | — | ✓ | ✓ |
| Copy-paste config examples (Apache, IIS, NGINX, HAProxy) | — | — | ✓ | ✓ |
| Personalized expert review | — | — | — | ✓ |
| Human consultant | — | — | — | ✓ |
You can upgrade to a higher plan at any time by paying only the difference.
Real report excerpt
Inspected domain: webinspect.pro
DNSSEC not detected
Without DNSSEC, DNS responses can be forged (DNS cache poisoning / Kaminsky attack). An attacker who poisons your DNS can silently redirect all your visitors…
No DKIM record found
DKIM cryptographically signs each outgoing email. Without it, receiving servers cannot verify the message was not tampered with in transit, and your emails a…
📋 RFC 6376
Cross-Origin-Opener-Policy (COOP) not set
COOP places the page in its own browsing-context group, preventing cross-origin windows from retaining references to it. It is one of two headers required fo…
📋 OWASP HTTP Security Response Headers Cheat Sheet — OWASP ASVS V14.4
Inspected domain: webinspect.pro
Cross-Origin Isolation
Modern browsers support a set of optional headers that provide stronger isolation between your website and other origins. These are defence-in-depth controls — not universally required — but they reduce exposure to certain browser-level attacks and are increasingly expected on sensitive applications.
Cross-Origin-Opener-Policy (COOP)
COOP places your page in its own browsing group, preventing cross-origin windows from retaining references to it. This helps guard against cross-window timing and navigation attacks.
Standard sites
Cross-Origin-Opener-Policy: same-origin
Get step-by-step guidance for every finding.
Ready-to-use config examples for Apache, NGINX and IIS — matched to your server
Your report will reflect your own domain. Technologies detected, DNS provider identified, instructions tailored to your setup.
Security Checks
Learn what WebInspect checks when it inspects your website, from SSL/TLS and security headers to DMARC, DNS and PCI DSS readiness indicators, and why each area matters.
WebInspect Partner Program
We're expanding our network of trusted security professionals around the world. If you're a cybersecurity professional or company interested in delivering Expert Reviews to clients in your region, we'd like to hear from you.