A consultant-grade review of what your website tells the world: encryption, certificates, security headers, and the details attackers use to pick their targets. One normal request to your homepage — nothing is scanned or attacked. Free to see. No signup.
Read-only: we load your homepage once, the same way any visitor's browser would, plus /robots.txt and /.well-known/security.txt. No probing, no admin-page discovery.
Whether http:// forces visitors to the secure version
Issuer, validity dates, and days until expiry (via Certificate Transparency)
HSTS, Content-Security-Policy, clickjacking, and content-type protection
Secure, HttpOnly, and SameSite flags on everything your site sets
Insecure resources and outdated jQuery/Bootstrap on the page
Server versions, CMS versions, and missing security.txt
These are the same hardening steps RIVNT applies to client sites every week — usually in a single maintenance window. Book a free assessment and we'll prioritize what matters most for your business or franchise.