Full corporate forensics — registration, ownership, people, and risk — at companyforensics.org.
Free tool · Passive website security check
Enter any website. We prioritize checks that matter when people invest, borrow, trade, or store funds — banks and lenders, crypto and forex, investment and network-marketing firms, training facilities, and country / city / county portals worldwide.
This usually takes 20–60 seconds.
Sample report: this is what a check of a site with many problems looks like. Run the tool on your own site to see your results.
Company Forensics Public Cybersecurity Assessment Unit
Graphs first — DNS, TLS, headers, reputation tiles and posture radar from this passive check.
Building analytics graphs from the report and public DNS…
Company Forensics · Public security-check registry
Official register of the most recent company security checks — including every completed interactive check from this page, plus crawler reports focused on finance, investment, and geo entities.
Showing 24 of 43 published most recent automatic security checks · timestamps UTC.
Registry updated 2026-11-03T12:16:29Z
Passive scan plus web-check-style analytics graphs — still read-only, no attacks.
HTTPS, certificate validity and expiry, TLS version, and whether HTTP redirects to HTTPS.
HSTS, Content-Security-Policy, clickjacking protection, nosniff, Referrer- and Permissions-Policy, cookie flags.
Obfuscated or encoded JavaScript, crypto miners, card-skimmer patterns, hidden iframes, mixed content, missing Subresource Integrity.
Redirect chains, other domains your pages use, open threat-intelligence lists, and hashes of linked files scanned for malware.
DNS, DNSSEC, TXT/CAA/MX, WHOIS age, carbon estimate, trackers, CDN hints, archives and more with animated gauges.
No. We fetch at most 15 public pages, one at a time with a pause between requests, and stop at any path your robots.txt disallows. It is the same traffic as one visitor clicking through your site.
No. A penetration test actively tries to break in. This check is passive: it reads what your site already shows to everyone and flags known warning signs. For a full test, hire a qualified security firm.
Only with their permission. You must confirm you own the site or are allowed to check it before a scan starts.
Every completed interactive check is published to the Latest security checks registry above (and at /your-domain/), so the public ledger stays current. A short-lived in-memory copy also lets you view the live dossier. Download the JSON report if you want a personal copy.
Any URL works. Our crawler seeds and editorial framing prioritize banks, lenders, crypto, forex, investment firms, network marketing, schools/training, and country/city/county pages — places where people put money or trust at risk.