Skip to main content

Check any contractor site for security and speed.

Type a website address. This page checks it live for HTTPS, redirects, security headers, and response time, the same things set up on every site we build.

Included in the $750 build

See all eight features
Try itThis check runs live against the address you enter.

Any domain works, with or without https in front.

What this check looks for

Press Check to test the address above, or type any other domain first.

HTTPS connection
Loads the home page over HTTPS and records the status code and response time. A redirect to another secure page on the same domain counts as a pass.
HTTP to HTTPS redirect
Requests the plain HTTP address and looks for a redirect that points to HTTPS.
www and apex redirect
Loads the www address and the address without www, and looks for one to redirect to the other.
Strict-Transport-Security
Looks for the header that tells browsers to use HTTPS on later visits, and reads how long that lasts.
Content-Security-Policy
Looks for a policy that limits where scripts, styles, and other files can load from.
X-Content-Type-Options
Looks for the nosniff value, which keeps browsers from guessing file types.
Frame protection
Looks for X-Frame-Options or a frame ancestors rule in the policy, which decide whether other sites can show the page inside a frame.
Referrer-Policy
Looks for a policy that sets how much of the page address other sites see when a visitor follows a link.
Permissions-Policy
Looks for a policy that sets which browser features, like the camera and location, pages can use.
Response time
Times the first response from the server. Under 600 ms rates fast, under 1,500 ms rates ok, and anything slower rates slow.
Server header
Reads the server name the response reports. It is shown for reference and not scored.

How it works on your build.

Configured and handed over. The files are yours.

  • Hosting and the domain, set up at launch

    Every $750 site goes live with hosting configured and the domain connected, deployed on Cloudflare's edge network.

  • SSL and the HTTPS redirect on every page

    SSL is handled on every $750 site. Every page loads over HTTPS, and the plain HTTP address redirects to the secure one.

  • The domain and the files are yours

    You own the domain and the files, and there is no monthly fee on the site.

Next step

Put this on your site.

Send your trade and the cities you work. The scope comes back in writing, and $375 starts the build.