Check a site before you trust it.
SiteSentinel inspects any public website across nine categories, from HTTPS and security headers to phishing signals and DNS, and shows the evidence behind every verdict.
Report
Overall score
A weighted average of every category below. Security and Safety count three times as much as SEO or WHOIS.
Login form on a well-known domain.
Ask about this report
Questions are answered from the findings above.
Every verdict shows its evidence.
A score on its own asks you to take it on faith. Open any check in a report and you get what SiteSentinel actually saw: the response headers it received, the line of HTML that triggered a warning, the script and where it loads from.
Each finding also says how many points it cost, why it matters and how to fix it, with a note when the result could be a false positive.
Content Security Policy (CSP)
−5 of 10 points · Security & HTTPS 95 → 90
Response headers from https://shop.example.net/
| strict-transport-security | max-age=31536000 |
| x-frame-options | SAMEORIGIN |
| content-security-policy | missing |
| x-content-type-options | nosniff |
How to fix, in nginx
add_header Content-Security-Policy "default-src 'self';" always;Nine inspectors, one report.
Each category runs in parallel and returns its own score. The multiplier is how much that category counts toward the overall score.
-
×3
Security & HTTPS
HTTPS, TLS version, HSTS, Content Security Policy, frame and content-type headers, scam redirects.
-
×3
Safety & Threats
Safe Browsing lookups, phishing and typosquat patterns, credential harvesting forms, obfuscated scripts, deceptive downloads.
-
×2
DNS & Domain
Resolution, redundancy, IPv6, CAA, and the SPF, DMARC and MX records that stop email spoofing.
-
×2
Link Analysis
Where the page's links lead, and which of them bounce through redirects to somewhere else.
-
×1.5
External Links
Every outbound link and URL hidden in scripts, scored safe, warning, unsafe or broken.
-
×1.5
Performance
Load time, response size, compression, caching, HTTP version and redirect hops.
-
×1.5
Accessibility
WCAG 2.1 basics: alt text, form labels, contrast, heading order, landmarks, keyboard access.
-
×1
SEO & Metadata
Title, description, canonical tag, Open Graph, structured data and mobile viewport.
-
×1
WHOIS & Domain Info
Registrar, domain age, expiry date, status and name servers. A week-old domain is a warning sign.
How a score is counted.
Every category starts at 100. A failed check costs its full weight, a warning costs half. Information-only checks cost nothing.
- Critical
- 35 points
- High
- 20 points
- Medium
- 10 points
- Low
- 5 points
A category never drops below 15 from ordinary findings, so one missing header can't read as total failure. The exception is a confirmed malware or phishing match, which sets Safety & Threats to 0.