Blackbox

Free website health check

Check your website

Enter your website address and get a health score in about ten seconds, with a plain-English list of what to change, most important first. It is built for small business owners who want to know if their site is secure, easy to find and set up properly, without needing to be technical.

What it checks

Security
HTTPS and redirects, SSL certificate validity and expiry, security headers, software versions shown publicly, insecure forms and resources, and passwords or secret keys left in the page code.
Domain and email
When your domain is due for renewal, transfer lock, DNSSEC, and whether SPF, DKIM and DMARC stop other people sending email that pretends to be from you.
Search and sharing
Page title and description, mobile set-up, headings, image descriptions, link previews for social media, robots.txt, sitemap, and whether the page is hidden from Google by mistake.
Content and hygiene
Placeholder or template text that was never replaced, links to temporary developer hosting, old test sites still online, and how long since the site was last updated.
Privacy
Privacy policy link, tracking tools with no visible cookie consent, which outside services receive what visitors type into forms, and UK company details.

What it does not do

  • It only looks at what anyone can already see in public: DNS records, domain registration data, the SSL certificate, and your home page, robots.txt and sitemap.
  • It does not scan ports, guess at hidden pages, try to log in, or test for vulnerabilities. It is not a penetration test or a security audit.
  • It checks the home page only, not every page on the site.
  • It does not measure full page speed in a browser, accessibility in depth, or how well you rank on Google.
  • It does not judge the design, the writing or the business behind the site.
  • Nothing is stored. We do not keep the addresses you check or the results, and no AI is used: every check is a fixed rule, so the same site gives the same answer. If you ask for a copy by email, it is sent once to the address you give and not kept.

Please only check websites you own or have a good reason to look at, such as a supplier you are considering. Results are a snapshot at the time of the check and are a guide, not a guarantee.