CVE-2025-55182
Detect unpatched React Server Components (React2Shell) with a non-executing probe plus version fingerprinting. Included in the free weekly preview.
Public website scanner
Know if a site is exposed — before someone else does.
One free preview per week (headers, TLS, well-known files, React2Shell). Full checks and extra scans need Pro — a new IP or VPN does not reset the preview.
Scan only sites you own or have permission to test. Terms · Free vs Pro
Security headers & TLS
CSP, HSTS, clickjacking, nosniff, Referrer-Policy, Permissions-Policy, stack banners, and certificate validity.
Exposed files
.env, .git/HEAD, package.json, and server.js — reported as exposed, with secrets redacted.
Pro: critical extras
Cookies, CORS, leftover backups, JS libraries, SPF/DMARC, source maps, and CVE-2025-29927. These extra HTTP/DNS checks run only on Pro so free traffic cannot exhaust the host.
Email a webmaster-ready report
Unlock a report for €9 or subscribe to SafetyScan Pro for €19/month. You choose the recipient. We never cold-mail strangers.