scanning engine: online

Security that movesat the speed of threats

Scan websites for SSL issues, security headers, WHOIS information, and AI security advice — plus 38+ free tools including a QR code safety scanner, privacy policy analyzer, and everyday utilities.

🎁 Your first Full Website Audit is free

01

0+

Free tools

02

0s

Scan time

03

0%

Threat detection

04

0

False sense of safety

live scan // instant

AI Website Scanner

Instant SSL, header & server check — no signup needed

0+

Website scans run

0+

Registered users

0+

Security tools

99.9%

Platform uptime

❯ all.tools

Every free tool, in one place

38+ scanners and utilities — free, instant, and backed by AI explanations.

Web & Content

Technology Detector

Detect CMS, Framework, CDN, Server & Analytics

Open tool
Network & Infrastructure

SSL Checker

Check SSL certificate security instantly.

Open tool
AI & Reports

AI Security Report

Get smart security recommendations.

Open tool
Network & Infrastructure

DNS Scanner

Analyze DNS configuration quickly.

Open tool
Headers & Configuration

Security Headers

Find missing protection headers.

Open tool
Network & Infrastructure

WHOIS Lookup

Get domain information.

Open tool
AI & Reports

Fast Scan

Scan websites in seconds.

Open tool
Malware & Threat Intelligence

Malware & Blacklist Checker

Detect malware, phishing & blacklist status across 70+ vendors.

Open tool
Network & Infrastructure

Port Scanner

Find open ports and exposed services on any host.

Open tool
Privacy & Accounts

Email Breach Checker

Check if your email was exposed in known data breaches.

Open tool
Privacy & Accounts

Password Security Checker

Test password strength and check if it's appeared in a known breach — both 100% client-side/private.

Open tool
Network & Infrastructure

Subdomain Finder

Discover subdomains using certificate transparency logs.

Open tool
Malware & Threat Intelligence

IP Reputation Checker

Check IP or domain reputation, ASN and geolocation.

Open tool
Web & Content

Broken Link Checker

Find broken (dead) links on any webpage.

Open tool
Malware & Threat Intelligence

Phishing & Typosquatting Detector

Find lookalike domains that could impersonate your brand.

Open tool
Headers & Configuration

CSP Generator

Build a Content-Security-Policy header to help prevent XSS.

Open tool
Web & Content

Accessibility Checker

Find common a11y issues — missing alt text, headings, form labels.

Open tool
Privacy & Accounts

Email Security Checker

Check SPF and DMARC records to prevent email spoofing.

Open tool
Web & Content

Redirect Chain Checker

Trace redirect chains and catch loops or excessive hops.

Open tool
Web & Content

Social Media Preview Checker

See how your link looks when shared on Facebook, WhatsApp, Twitter/X.

Open tool
Privacy & Accounts

JWT Decoder & Analyzer

Decode JWTs and flag alg:none, missing expiry & other issues — 100% client-side.

Open tool
Headers & Configuration

CORS Misconfiguration Checker

Catch origin-reflection and wildcard + credentials CORS mistakes.

Open tool
Headers & Configuration

Cookie Security Scanner

Check cookies for missing Secure, HttpOnly & SameSite flags.

Open tool
Malware & Threat Intelligence

Exposed Files & Git Leak Scanner

Find publicly exposed .env, .git, and backup files on any site.

Open tool
Network & Infrastructure

Subdomain Takeover Checker

Detect dangling CNAMEs pointing to unclaimed GitHub Pages, S3, Heroku & more.

Open tool
Malware & Threat Intelligence

IP Blacklist (DNSBL) Checker

Check if an IP/domain is listed on Spamhaus, SpamCop & other blacklists.

Open tool
Network & Infrastructure

WAF / Firewall Detector

Identify Cloudflare, Sucuri, Akamai, Imperva & other WAFs protecting a site.

Open tool
Web & Content

security.txt Checker

Verify a site's vulnerability-disclosure file follows RFC 9116.

Open tool
Web & Content

Subresource Integrity (SRI) Checker

Find cross-origin scripts/stylesheets missing integrity hashes.

Open tool
AI & Reports

AI Prompt Injection Detector

Scan text for prompt-injection & jailbreak attempts before feeding it to an AI.

Open tool
Everyday Utilities

QR Code Generator

Turn any URL or text into a downloadable QR code.

Open tool
Everyday Utilities

Password Generator

Generate a strong, random password instantly.

Open tool
Unique Tools

Is This Email a Scam?

Check a sender's email address for scam red flags in plain English.

Open tool
Unique Tools

Compare Website Security

Compare two domains' SSL, headers, and server setup side by side.

Open tool
Unique Tools

QR Code Safety Scanner

Decode a QR code and check its destination link's safety before you visit it.

Open tool
Unique Tools

Privacy Policy Red-Flag Analyzer

AI-powered plain-English breakdown of concerning privacy policy clauses.

Open tool
Unique Tools

Is This Online Store Legit?

Check an unfamiliar online store's trust signals before you order.

Open tool
Unique Tools

Am I Being Tracked?

Check any website for known analytics and advertising trackers.

Open tool

Browse all 38 tools

Filter by category on the tools page

AI Security Advisor

Ask the AI what your scan results mean

Every scan comes with a plain-English breakdown — what went wrong, why it matters, and exactly how to fix it. No security background required.

Why is my SSL grade low?Explain my missing security headersIs this port safe to leave open?How do I fix a failed DMARC check?
Get an AI Security ReportOr tap the chat icon anytime to ask a question

Nexora AI

● Online

Why is my SSL grade low?
Your certificate uses an outdated cipher suite and expires in 12 days. I'd recommend renewing it and enabling TLS 1.3 — here's how...
Ask about any scan result…

❯ your.scans

Recent scans

❯ blog.latest

From the blog

View all articles

❯ faq

Frequently asked questions

Is Nexora Shield free to use?

Yes — the Free plan includes 5 scans per day across all our tools. The Premium plan (₹99/month) removes daily limits and unlocks scheduled scans, API access, and more.

Do I need to create an account to scan a website?

You need to sign in with Google or GitHub to run scans. This lets us save your scan history, enforce fair usage limits, and send you alerts for scheduled scans.

Is scanning someone else's website legal?

You should only scan domains you own or are authorized to test. Our tools are designed for checking your own websites or client sites you have permission to assess.

How does the AI Security Report work?

After a scan completes, our AI analyzes the results (SSL status, headers, malware checks, and more) and generates a plain-English summary with prioritized, actionable recommendations.

Will scanning my website slow it down or cause issues?

No — our scans are read-only checks (like an HTTP request or DNS lookup) and don't modify or stress your website in any way that would cause downtime.

Can I cancel my Premium subscription anytime?

Yes, you can cancel anytime from your dashboard. You'll keep Premium access until the end of your current billing period — see our Refund Policy for full details.

❯ pricing.plans

Choose your plan

Secure your websites with Nexora Shield

38+ tools below (QR codes, password generator & more) are 100% free — no account needed at all

Free (with account)

₹0/month

Unlimited Quick Scans
5 full-detail scans daily
1 free Full Website Audit (lifetime)
AI report + PDF export on that 1 audit
Technology Detector, SSL, DNS, WHOIS
Unlimited Full Audits
Ongoing AI Security Reports
Unlimited PDF exports
MOST POPULAR

Premium

₹99/month

Unlimited Full Website Audits
Unlimited AI Security Reports
Unlimited PDF exports
Unlimited scans — every tool
Fast Scan priority queue
Scan history
Premium support