LetCheck runs a deep, non-intrusive audit covering security headers, SSL, SEO, performance, WHOIS ownership, hosting provider, tech stack, and email DNS — then explains everything in plain language.
no login · no exploitation · no intrusion · read-only defensive scan
// scan_modules
HSTS, CSP, X-Frame, cookie flags, server disclosure, mixed content.
Protocol enforcement, secure cookies, HTTP→HTTPS redirect hygiene.
Titles, meta, headings, canonical, OG, Twitter cards, JSON-LD, robots, sitemap.
TTFB, payload size, compression, caching, external script count.
Viewport, lang, alt text, semantic structure, favicon, manifest.
SPF, DMARC, MX — spoofing & phishing surface.
Registrar, registrant, country, age, expiry, nameservers.
Resolved IP, ISP, ASN, geolocation, reverse DNS.
Executive summary, risk-ranked actions, business impact.
// ai_engine
Every scan is interpreted by an AI engine that turns raw findings into an executive briefing, a prioritized action list, and concrete remediation guidance — written in plain language.
> GET https://example.com 200 OK 142ms
✓ TLS 1.3
✗ missing strict-transport-security
✗ missing content-security-policy
✓ x-content-type-options: nosniff
✗ server header exposes: nginx/1.18.0
✓ <title> present (52 chars)
✗ /sitemap.xml not found
✓ SPF record found
✗ no DMARC policy
WHOIS: GoDaddy · age 6.2 yrs · expires 2026-03
Host: Cloudflare · AS13335 · US
[score] security: 58 seo: 74 perf: 81
[ai] Posture is moderate. The most urgent
gap is the missing CSP — once added,
the site moves from 58 → 78 on
security. Two quick wins remain in
SEO (sitemap, canonical).// digital_intelligence
Every scan collects the resources a site is built on: domain ownership, hosting provider, IP geolocation, tech stack, plugins and third-party APIs it depends on.
Registrar, registrant, country, registration date, expiry, age, nameservers.
Resolved IP, ISP, hosting provider, ASN, geolocation, reverse DNS.
CMS (WordPress, Shopify, Drupal…), frameworks, libraries, analytics, payments.
External scripts, trackers, fonts, CDNs — every domain a visitor's browser contacts.
// full_report
We tell you what the site is doing right just as clearly as what it's doing wrong, so you know exactly where to focus next.
Free, instant, no account needed. Paste any URL and get your full report.