SiteScout
SiteScout is a lightweight site checker I built for my own diagnostic work and made available free. It looks at a URL and reports the things that most often turn out to be the problem.
Last updated: 1 August 2026
What it checks
SiteScout runs a read-only inspection of a public URL. It makes ordinary HTTP requests — the same as any browser or search engine crawler — and does not attempt to access anything private.
- Response codes, redirect chains and canonical URL handling
- TLS certificate validity, expiry and chain issues
- Core Web Vitals estimates and page weight breakdown
- Security headers and obvious misconfigurations
- Exposed paths that commonly leak information (.git, backups, install directories)
- SPF, DKIM and DMARC records for the domain
- Detected platform, plus version exposure where it is publicly visible
What it does not do
It does not attempt to exploit anything, does not brute-force, does not scan ports, and does not test authenticated areas. It is a diagnostic aid, not a penetration test.
It is also not a substitute for a real security audit. A clean SiteScout report means the obvious things look fine, not that the site is secure.
Please only scan sites you control
Scanning is limited to publicly available information, but you should still only check sites you own or have permission to check. Requests are rate-limited per IP, and abuse gets blocked.
Data handling
Scan results are held briefly so the report can be displayed and are not published, indexed or shared. Scanned URLs are logged for abuse prevention and rate limiting.
The dedicated privacy note explains this in more detail.
Availability
SiteScout is provided free with no uptime guarantee and no warranty. It exists because it is useful, not as a commercial product, and it may change or disappear.
Not legal advice. These documents are written to be clear and fair, and they are not a substitute for a solicitor. Have them reviewed before relying on them commercially — particularly the liability and jurisdiction clauses.