Grade any website's security in one click
A Chrome extension that checks the site you're on and gives it an A–F grade, with a plain-English fix for every issue it finds.
Add to Chrome — it's freeFree to use. Runs in your browser, with no tracking.
Security headers & HTTPS
CSP, clickjacking protection, HSTS, redirects and version leaks.
Cookies & page content
Session cookie flags, mixed content, insecure forms and outdated JavaScript libraries.
Email spoofing
SPF and DMARC checks, so nobody can send email pretending to be you.
Attack surface
Subdomains from public certificate logs, with admin, dev and staging systems flagged.
Copy-paste fixes
Ready-made fixes for nginx, Apache, Netlify, Vercel, Express and your DNS, or fix every missing header with one snippet.
Client-ready reports
PDF reports with your logo, your client's name, a plain-English summary and a score history chart. Pro.
Grade on your toolbar
See a site's grade on the SurfaceWatch icon, and how its score changed since your last check.
Bulk check
Check 25 client sites at once and download the results as a spreadsheet. Pro.
Free and Pro
| Free | Pro | |
|---|---|---|
| One-click check of any site | ✓ | ✓ |
| Daily watching with alerts | 1 site (fixed) | 25 sites (change anytime) |
| Subdomains shown | 3 | All |
| Copy-paste fixes | ✓ | ✓ |
| Grade on toolbar, score changes | ✓ | ✓ |
| Bulk check with CSV export | – | 25 sites at once |
| Score history chart | – | ✓ |
| PDF and JSON reports | – | ✓ |
| Your logo on reports | – | ✓ |
| Price | Free | $7/month or $59/year |