Security SnapshotOne-off website security report · by ARQS CA$19
CHECK · FIX · SHARE

How safe is your website today?
A plain-language report in ten minutes.

Paste your site's response headers and email DNS records, answer five quick questions, and Security Snapshot gives you a 0–100 score, a letter grade and a fix list in the order that matters most: HTTPS, HSTS, Content-Security-Policy, clickjacking, cookie flags, version leaks, updates, backups, two-factor sign-in and email spoofing (SPF, DKIM, DMARC). Print it or send it to your web developer. It never scans or contacts your site; it only reads what you paste here, and everything stays on this device.

1. Your site

How do I get my headers?
  • On a computer: run curl -sIL http://yourbusiness.ca in Terminal and paste everything it prints (the http:// start also shows whether you redirect to https://).
  • In Chrome or Safari on a computer: open developer tools, Network tab, reload, click the first request and copy the Response Headers.
  • On iPhone or iPad: ask your web host or developer to send you the response headers for your home page.

Cookie values are removed automatically before anything is saved or shown, because they can work like passwords.

Where do I find these?

In your domain or email provider's DNS settings, look for TXT records on your domain (SPF), on _dmarc.yourdomain (DMARC) and on selector._domainkey.yourdomain (DKIM; Google Workspace uses google, Microsoft 365 uses selector1). Copy the values here.

2. Five quick questions

3. Your snapshot

0/100

F

Fix these, in this order

    All checks

    4. Share the report

    The one-page report opens in any browser and prints cleanly (Share, then Print, on iPhone). It has no scripts and no cookie values.

    Keep watching with SiteGuard

    A snapshot is one moment. Plugins update, certificates expire and headers get lost in a redesign. ARQS WebsiteGuard (SiteGuard monitoring) keeps checking your site for you and tells you when something changes.

    See SiteGuard monitoring

    Saved snapshots

    Backup

    ARQS · Now available

    CA$19 · lifetime access

    Full Security Snapshot: paste your response headers and email DNS records, answer five quick questions, and get a 0–100 score, a letter grade and a fix list in priority order for HTTPS, HSTS, Content-Security-Policy, clickjacking, cookie flags, version leaks, updates, backups, two-factor sign-in and email spoofing (SPF, DKIM, DMARC), plus a one-page printable report, copy text, saved history with score changes and on-device backup. Runs in your browser and never scans or contacts your site; your headers and records never leave your device. One-time payment, run as many snapshots as you like.

    Buy now Buy in our store

    Buy now: secure checkout by Stripe in CAD (one-time payment, lifetime access) · Our store: Shopify, USD, lifetime access · Questions: sales@arqs.ca