See how your websitestacks up against attackers.
Enter your website. In about 20 seconds you’ll see what a hacker or scammer sees: your encryption, your email and domain protection, and what your site gives away, explained in plain English.
Safe and passive. We only look at what any visitor can see.
Checking
What a scammer would notice first
Checking HIPAA items
This runs alongside your security scan and takes a few more seconds.
0 more findings, with a fix for each
Get the full report on screen and in your inbox. It’s free.
Every finding, with how to fix it
Found problems?Fixing them is our day job.
DirecTech is a managed IT and cybersecurity provider. We watch your business around the clock and build websites that pass this check on day one.
Managed IT and security
Your team works. We keep watch.
- 24/7 monitoring of every computer, server and network device
- Patching for Windows, Mac and apps, done after hours
- MFA on email and every account that matters
- Email security: SPF, DKIM and DMARC set up so nobody can pose as you
Websites built secure
Built, hosted and kept up by us.
- HTTPS everywhere
- HSTS
- Content Security Policy
- Clickjacking guard
- Hidden versions
- Updates handled
- Secure by default: HTTPS, security headers and locked-down logins
- Hosted and monitored, with updates handled for you
- Free build, then $50 a month for secure hosting
Get a free security consultation
Talk to a real person about your results. No pressure, no jargon.
Is this scan safe to run on my website?
Yes. It only reads public information, the same things any browser or email server sees: your DNS records, your secure connection and your homepage. It never fills in forms, tries passwords or probes for weak spots.
What exactly does it check?
33 checks in four areas. Encryption: HTTPS, the certificate, TLS version, HSTS and the certificates on your other subdomains. Website: browser security headers, insecure files and cookies. Email and domain: SPF, DMARC, DKIM, MTA-STS, TLS reporting, CAA, DNSSEC and subdomains that point to services that no longer exist. Exposure: software versions, WordPress user lists, theme and plugin updates, XML-RPC, readme files, outdated code libraries and security.txt.
What does the HIPAA check look at?
Check the HIPAA box before you scan and you get a second, separate score for the parts of HIPAA a website shows in public: forced https and modern encryption, a posted Notice of Privacy Practices and privacy policy, tracking pixels and analytics on patient pages, where your forms send what patients type, chat and booking tools that need a business associate agreement (BAA), and whether your email provider offers a BAA. It cannot see your risk analysis, signed BAAs, policies, staff training or access controls, so it is a readiness score, not a certification.
Is this a full security audit?
No. It’s a fast outside-in look that catches the most common gaps. Your computers, passwords, backups and staff training matter just as much, and that’s what our free consultation covers.
Security Check by DirecTech.net. Automated checks of public information only. Results are a starting point, not a full audit.
