Security headers check
CSP, HSTS, clickjacking protection, cookie flags and server disclosure.
Open the toolFree · No card · No sales call
Free security tools from Sumrite.
Every check below runs inside Sumrite’s free scanner. Pick the one you came for, or run them all at once on your domain.
FreeNo card and no sales call.
PassivePublic checks only; nothing on your site is changed.
About 5 minutesFor the full website report.
Sumrite offers free security tools for websites and apps: a security headers check, an SSL/TLS checker, a DMARC and SPF checker, a subdomain finder and an APK and IPA scanner, all inside the free scanner at scan.sumrite.com, plus a free PII data discovery tool for India’s DPDP Act at dpdp.sumrite.com.
SSL/TLS checker
Certificate validity, chain, expiry and the TLS versions you accept.
Open the toolDMARC and SPF checker
SPF, DMARC, DNSSEC, zone transfers and dangling DNS records.
Open the toolSubdomain finder
Subdomains from certificate transparency logs and DNS, with live checks.
Open the toolAPK and IPA security scanner
Permissions, secrets, network settings and crypto in .apk and .ipa builds.
Open the toolDPDP PII discovery
Find Aadhaar, PAN, mobile and bank data across your systems. Runs in your network.
Get the toolFrequently asked questions
Are Sumrite’s security tools really free?
Yes. There is no card and no sales call. The full website report is also sent to your work email.
Are the tools safe to run on a live site?
Yes. They read public responses, DNS and certificates and check which ports answer. No exploit payloads are sent.
What do the free tools not find?
Broken access control, business logic flaws and chained attacks. Those need an expert-led penetration test.
Ready for what a scanner cannot find?
Expert-led testing, verified findings, retest included.