Everything Nyrolo Trust checks — and shows you
Real HTTP and TLS checks against the live site, rolled up into one trust score, with a dashboard and history to track it over time.
What every scan checks
Ten weighted checks, run live against the site — not cached, not estimated.
HTTPS & TLS validation
Every scan requests the site over plain HTTP first to confirm it's redirected to HTTPS, then inspects the TLS certificate on the final response — the same connection a browser or attacker would make.
Security header analysis
We read the live response headers for HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy, and check whether the server discloses version fingerprints it shouldn't.
Mixed content & cookie checks
The scan looks through the page's HTML for insecure http:// resource references and checks that cookies set on the response carry the Secure flag.
- HTTPS enforced
- Valid TLS certificate
- Strict-Transport-Security
- Content-Security-Policy
- Clickjacking protection
- MIME-sniffing protection
- Referrer-Policy
- Server fingerprint hidden
- No mixed content
- Secure cookie flags
New to this kind of tool? See how a website security scanner works. Want to check these yourself, manually, before you run a scan? Read our website security checklist.
One trust score, 0–100
The 10 checks are combined into a single weighted score, so you can tell at a glance whether a site is strong (80–100), needs work (50–79), or risky (below 50) — and whether that's changing over time.
Already have a result? Learn how to read your trust score.
Dashboard
A mobile-responsive overview of your scanning activity as soon as you log in.
- Total scans, average trust score, and a breakdown of strong vs. risky sites
- A score distribution chart across all your scanned sites
- A recent-scans list linking straight to each full result
Scan history
Every scan is saved to your account so you can go back and audit what changed.
- Every scan you've run, most recent first, with its trust score at a glance
- Search by URL or domain to find a specific scan
- Filter by score tier — strong, needs work, or risky
- Open any scan to see the full 10-check breakdown behind its score
Fast scanning
Paste a URL and get results in under 15 seconds — the scan runs live, so there's nothing to wait on and nothing cached from a previous check.
Your own account
Sign up with email to keep every scan attached to your account, private to you, and accessible from any device.
See it on a real site
Create a free account and run your first scan in under a minute.