Website health check
Run the main website, DNS and email checks on one site at once and get a short report, area by area, with links to the full results.
Running the Health Check. This can take up to 30 seconds.
Choosing a check opens its page. With the keyboard, use the arrow keys, then press Enter.
How the Health Check works
Enter a website address or domain and we run the main checks from our server, one after another, then show a short report. Each part links to the full check if you want the details.
- Availability: whether the site answers, the HTTP status, response time and redirects.
- HTTPS and certificate: whether the certificate is valid and trusted, and when it expires.
- DNS: whether the name has IPv4 and IPv6 addresses, and the domain's nameservers.
- Web headers: which of five browser security headers are set.
- Email domain: mail servers (MX), SPF and DMARC.
- DNS security: CAA records and DNSSEC.
- Search engine files: robots.txt and one sitemap.
What it doesn't do
It isn't a security scan or an audit. It doesn't look for vulnerabilities, test logins or scan ports, and it doesn't give a score or grade: a site can pass every part and still have problems, and an optional feature that isn't set up is not a failure. It is a single snapshot from one place at one moment, not monitoring.
Reading the report
- Pass: that part looks right.
- Attention: something may cause problems, or an important record is missing.
- Fail: something is broken, for example an expired certificate or a site that doesn't answer.
- Informational: an optional feature isn't set up, such as CAA or a sitemap. Often fine.
- Unable to determine: we couldn't check that part this time, for example because the site was checked many times in the last minute or the check reached its 30-second limit.
The Health Check counts as 8 checks towards your hourly allowance, because it runs several checks at once. Recent results of the individual checks are reused, so it doesn't contact the site more than it needs to.
Frequently asked questions
Is this a security scan?
No. It reads public information a browser or mail server would see: whether the site answers, its certificate, DNS and email records, a few response headers, robots.txt and the sitemap. It doesn't look for vulnerabilities, test logins or scan ports, and it doesn't give a score.
Why does a part say "Unable to determine"?
That part couldn't be checked reliably this time. For example, the site was checked many times in the last minute, a DNS server didn't answer, or the whole check reached its 30-second limit. The other parts are still shown. Try again in a minute, or open the full check for that part.
Why do the email checks use the main domain?
Email records such as MX, SPF and DMARC are usually published on the main domain (example.com), not on www.example.com. So if you enter www.example.com, the website parts check www.example.com and the email and DNS security parts check example.com.
What is the difference between Informational and Attention?
Informational means an optional feature isn't set up, for example no CAA record or no sitemap. That is often fine. Attention means something is set up in a way that may cause problems, or an important record is missing, for example no DMARC policy.
How often should I re-check?
After you change DNS, email or server settings. Results are saved for 5 minutes, and recent results of the individual checks are reused, so a re-check within a few minutes shows the saved answer and says how old it is.
Related tools
-
HTTP Header Checker
See the HTTP status and every response header a website sends, for the final page and each redirect on the way.
-
Redirect Checker
Follow a web address through every redirect, with the status code, destination and timing of each hop.
-
BIMI Checker
Check whether a domain is set up to show its logo next to its emails: the BIMI record, DMARC, the logo file and the mark certificate.
-
MTA-STS Checker
Check whether a domain asks other mail servers to use secure, verified connections when they deliver its email.
-
TLS-RPT Checker
Check where other mail servers send reports when they can't make a secure connection to a domain's mail servers.