DE EN IT

~/home / report-card

What grade does your website get?

Type a domain, wait a few seconds, collect your report card. We check security headers, e-mail protection and the certificate and grade them A to F. Teacher remarks included.

Demo, grade A: ★ daniele-michelin.com

How the big websites do

We regularly check well-known websites. Who sits in the front row, who gets detention?

Header ranking →Security headers of the big websites compared. E-mail ranking →SPF, DMARC and MTA-STS of the big domains.

How we grade

  1. Security headers · 40 %HSTS, Content-Security-Policy, nosniff, framing protection, Referrer and Permissions Policy, COOP, and whether the server leaks its version.
  2. E-mail protection · 35 %SPF and how strictly it ends, DMARC with policy and reports, MTA-STS, and whether there is a mail server at all.
  3. TLS certificate · 25 %Is the certificate valid, for how much longer, and does the server speak a current TLS version?

Grading scale: A (90+) to F, with the score out of 100 next to the letter.

Nothing is stored except the report card you see (so the link works). At most 10 checks per hour.

← Home