HTTPS and certificates
The worker checks the HTTPS connection and certificate information using a verified public website origin.
Configuration / Security health
Spot the small gaps that matter.
Get a readable view of HTTPS and response-header configuration, without confusing a health check with a full security audit.
Verified domains onlyHeaders and cookies
Review configuration signals such as HSTS, Content Security Policy, and secure cookie attributes, with explanations of findings.
A deliberately narrow scope
Paid users and administrators can select bounded active GET probes on verified domains, with explicit consent. These look for new SQL error signatures and unencoded HTML reflection in existing query parameters. CSRF review checks form-token indicators without submitting forms. Findings require manual validation; no scan proves a site is secure.
Current availability
Live configuration checks require domain verification. Detailed reports include certificate evidence, negotiated TLS, policy headers, cookie attributes and recommendations. Optional bounded active probes report indicators; exploitation, authenticated attacks and exhaustive vulnerability scanning are not included.
YOUR NEXT STEP STARTS HERE
Get started with LoadVM ↗Get to know your website better.
Create a workspace or explore an example first.