Free tool · Passive website security check

Is your business website safe for your customers?

Enter your website address. We visit your public pages like a careful visitor would and check them for security problems: missing protections, unsafe scripts, hidden iframes, risky redirects, certificate issues and links to known malicious sites.

Start a check

Full web-check graphs, DNSBL / geo tiles, and animated posture radar — no scan required.

888AI · Public security-check registry

Latest security checks

Official register of the most recent company security checks published by 888AI — including every completed interactive check from this page, plus crawler reports.

Source index: /data/recent.json Timezone: UTC

Showing 24 of 33 published most recent automatic security checks · timestamps UTC.

Registry updated 2026-11-03T12:15:53Z

#Company / DomainChecked at (UTC)VerdictScoreReviewSecurity report
1bitrix24.comCaution advisedC · 68/100
2trust.redis.ioStrong protectionsA · 87/100
3blog.jetbrains.comCaution advisedC · 59/100
4jetbrains.comTrusted — verifyB · 70/100
5example.orgCaution advisedC · 67/100
6odoo.comTrusted — verifyB · 80/100
7slack.comTrusted — verifyB · 76/100
8au.githubstatus.comStrong protectionsA · 86/100
9vercel.comTrusted — verifyB · 79/100
10redis.ioTrusted — verifyB · 70/100
11thegithubshop.comTrusted — verifyB · 71/100
12mongodb.comElevated riskD · 53/100
13stripe.comStrong protectionsA · 88/100
14cloud.redis.ioCaution advisedC · 59/100
15academy.jetbrains.comElevated riskD · 54/100
16githubstatus.comTrusted — verifyB · 74/100
17vercel-status.comTrusted — verifyB · 74/100
18university.redis.ioTrusted — verifyB · 79/100
19gitlab.comCaution advisedC · 62/100
20shopify.comCaution advisedC · 68/100
21twilio.comTrusted — verifyB · 74/100
22github.comStrong protectionsA · 92/100
23cli.github.comElevated riskD · 51/100
24xero.comCaution advisedC · 59/100

What we check

Passive scan plus web-check-style analytics graphs — still read-only, no attacks.

Encryption

HTTPS, certificate validity and expiry, TLS version, and whether HTTP redirects to HTTPS.

Security headers

HSTS, Content-Security-Policy, clickjacking protection, nosniff, Referrer- and Permissions-Policy, cookie flags.

Scripts & content

Obfuscated or encoded JavaScript, crypto miners, card-skimmer patterns, hidden iframes, mixed content, missing Subresource Integrity.

Reputation & files

Redirect chains, other domains your pages use, open threat-intelligence lists, and hashes of linked files scanned for malware.

Web-check analytics

DNS, DNSSEC, TXT/CAA/MX, WHOIS age, carbon estimate, trackers, CDN hints, archives and more with animated gauges.

Questions

Will this harm or slow down my website?

No. We fetch at most 15 public pages, one at a time with a pause between requests, and stop at any path your robots.txt disallows. It is the same traffic as one visitor clicking through your site.

Is this a penetration test?

No. A penetration test actively tries to break in. This check is passive: it reads what your site already shows to everyone and flags known warning signs. For a full test, hire a qualified security firm.

Can I check someone else's website?

Only with their permission. You must confirm you own the site or are allowed to check it before a scan starts.

Do you store my results?

Every completed interactive check is published to the Latest security checks registry above (and at /your-domain/), so the public ledger stays current. A short-lived in-memory copy also lets you view the live dossier. Download the JSON report if you want a personal copy.

A finding seems wrong. What now?

Automated checks look for patterns, so some findings need a human look. Use the evidence shown with each issue to confirm it with your web developer.