CVE-2025-55182
Detect unpatched React Server Components (React2Shell) with a non-executing probe plus version fingerprinting. Always free, full evidence.
Public website scanner
Know if a site is exposed — before someone else does.
Free basic scan for every public URL. Honest A–F grade. Pro evidence stays locked so the internet still gets a real evaluation — and webmasters can buy the packet they can email.
Scan only sites you own or have permission to test. Terms · Free vs Pro
Security headers & TLS
CSP, HSTS, clickjacking, nosniff, Referrer-Policy, Permissions-Policy, stack banners, and certificate validity.
Exposed files
.env, .git/HEAD, package.json, and server.js — reported as exposed, with secrets redacted.
Pro: critical extras
Cookies, CORS, leftover backups, JS libraries, SPF/DMARC, source maps, and CVE-2025-29927. Grade always includes them; evidence is locked until you unlock.
Email a webmaster-ready report
Unlock a report for €9 or subscribe to SafetyScan Pro for €19/month. You choose the recipient. We never cold-mail strangers.