Free tool · No sign-up
Website Speed & Security Check.
See how fast your site responds, whether HTTPS and the http:// redirect work, and which security headers are missing, with plain-English fixes.
Checks: response time · PageSpeed mobile score · compression · HTTPS · HTTP → HTTPS redirect · HSTS · CSP · X-Frame-Options · nosniff · Referrer-Policy
Enter a website above to see its report here.
What each check means
Speed, HTTPS and headers, in plain English.
Speed
How fast the server answers, how many redirects come first, whether pages are compressed, and Google’s mobile speed score. Slow sites lose visitors and rank lower.
HTTPS & redirect
Whether the secure version works, and whether anyone typing http:// is sent to it permanently (a 301 redirect).
HSTS
Tells browsers to always use HTTPS for your site, so nobody on public Wi-Fi can quietly downgrade the connection.
Content-Security-Policy
Lists where scripts may load from, which limits the damage if a plugin or form is ever hacked.
X-Frame-Options
Stops other sites from loading your pages in a hidden frame to trick visitors into clicking.
nosniff, Referrer & Permissions
Small headers that stop browsers guessing file types, limit what your page addresses reveal, and restrict camera or location access.
Questions
Frequently asked
- What does the website check test?
- Speed (server response time, redirects, compression, page size and a Google PageSpeed mobile score), whether HTTPS works and http:// redirects to it, and seven security headers: HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and software version exposure.
- What are security headers?
- Short instructions your website sends to the browser with every page, such as “only use HTTPS” or “don’t let other sites frame this page”. They block common attacks at no cost and take minutes to add.
- Why does my site need an HTTP to HTTPS redirect?
- Without it, people who type your address or follow old links can land on the insecure version, where logins and forms can be read on public Wi-Fi. Google also prefers one secure address.
- Why is my speed score different each time?
- Load speed depends on the server, network and testing location at that moment. Run the check a few times and look at the trend, not one number.
- Can you fix these for me?
- Yes. Most fixes take minutes in Cloudflare or your web host: redirects, HSTS, security headers, caching and compression. Book a free assessment and we’ll tell you exactly what to change.
Let's talk about your IT.
Whether something broke this morning or you're planning what comes next, we're ready to help.