Talos self-check
What your site shows the world.
A free check of what any visitor's browser already sees: HTTPS, the security headers, and how cookies are set. It's for owners only, so you'll prove the domain is yours with one DNS record first. It loads your home page once, the way a browser does. Nothing more.
-
Your domain
-
Prove it's yours
Add this TXT record wherever your domain's DNS lives (your registrar, Cloudflare, your host). It doesn't change anything about your site, and you can remove it after.
TypeTXTNameValue -
Your report
This is only the outside. It can't see your code: keys left in it, missing limits, one customer reaching another's data, payments that run twice. That's where most real incidents start, and it's what an engineering review covers.
Request a review