Free Website Health Test & Security Check
Test any page for uptime, speed, HTTPS, security headers, caching and front-end problems. Each issue comes with the exact header or change that fixes it.
What it checks
- Availability & speed
- The HTTP status, time to first byte, redirect chain, and whether plain http:// redirects to HTTPS.
- Security headers
- Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, clickjacking protection, Referrer-Policy, Permissions-Policy and software-version leaks.
- Performance hygiene
- Compression, cache headers, HTML size, render-blocking scripts in the head, images without dimensions and lazy loading.
- Page integrity
- Mixed content on HTTPS pages, character encoding, unsafe target="_blank" links and the HTML5 doctype.
Questions
How is this different from the domain health checker?
The domain health checker looks at DNS, email authentication, registration and certificates. This test looks at the website itself: what the server sends back for one page, its security headers, caching and front-end hygiene. Run both for the full picture.
Why are security headers part of website health?
They are instructions to the browser that block whole classes of attack — downgrade to HTTP, injected scripts, clickjacking. They cost nothing to add, and their absence is one of the first things a security review flags.
Where is the response time measured from?
From Cloudflare’s edge network, close to where the request is made. It is the server’s own speed, separate from your visitor’s connection.
Is the website health test free and private?
Yes. It fetches the page once, keeps the result for 10 minutes to avoid duplicate requests, and stores nothing else. The source code is on GitHub.