Website quick check: Is your website secure and reachable?
Enter your domain. In a few seconds we check encryption, redirect, response time and the protection of your email addresses – and explain every result in plain English.
Nine points, checked from the outside
We look at what every visitor and every mail server sees – without login details and without touching your website.
- Reachability (DNS)Does your domain point to a web server – via IPv4 and IPv6?
- HTTPS certificateIs it valid, does it match your domain, and how long until it expires?
- Redirect to HTTPSAre people who type http:// permanently redirected to the secure version?
- HSTSDoes your server tell browsers to connect only via encryption from now on?
- Response timeHow quickly does your website send its first response?
- Receiving email (MX)Are mail servers listed so that emails can reach you?
- SPFIs it clear which servers may send email in your name – strict (“-all”) or soft (“~all”)?
- DMARCWhat happens to forged emails in your name: nothing, spam folder or rejection?
- DKIMIs there a digital signature key under one of the usual names? We only show this as a note.
Good to know
Is the quick check really free?
Yes – no sign-up and no catch. To keep it fast for everyone, you can run at most six checks in ten minutes.
Can the check break anything on my website?
No. We read public DNS records and load your homepage exactly once via https:// and once via http:// – just like a visitor. We don't log in anywhere and don't change anything.
What's the difference from the Monster-Check?
The quick check looks at your domain from the outside in seconds. The Monster-Check goes deeper: we also look behind the scenes and give you a clear plan of what to do – at a fixed price of €150 net.
What happens to your data
Für den Test verarbeiten wir die Domain, die du eingibst, und deine IP-Adresse. Ohne Konto nutzen wir die Domain nur für diese eine Prüfung – wir speichern sie nicht und schreiben sie in kein Protokoll. Bist du in deinem Monster-Konto angemeldet, legen wir Domain und Ergebnis dort unter „Meine Website-Checks“ ab, damit du den Verlauf siehst; du kannst jeden Check jederzeit selbst löschen. Deine IP-Adresse zählen wir nur verschlüsselt (als Prüfwert) für die Missbrauchsgrenze; diese Zähler löschen wir nach 24 Stunden.
The legal basis is your request (Art. 6(1)(b) GDPR) and our legitimate interest in secure, fair operation (Art. 6(1)(f) GDPR). You'll find all the details in the privacy policy.
Prefer to talk to a real person right away?
Tell us what's bugging you. A real person will get in touch with an assessment and a price – before anything happens.