Full Site Security Auditor
Run a full website security check, free, right in your browser.
A free Chrome extension that runs 47 security, DNS, and CMS checks on your site and reports each one on its own.
Version 1.0.1 for Chrome, Edge and Brave. No account needed.
Why this matters
Security issues often sit quietly until something goes wrong: an exposed config file, a missing security header, an outdated library, or a subdomain that can be taken over by someone else. Most site owners never check for these things because it takes time and know how. This tool runs the full checklist for you and tells you plainly what needs attention.
What it checks
The 47 checks cover several areas:
- Transport and header security, like HTTPS redirects, security headers, and TLS certificate expiry
- Exposed files and attack surface, like config files, backup files, and admin panels
- CMS and framework detection, including outdated libraries and version leaks
- Malware and blocklist reputation, including hidden spam and cloaking
- Bot and form abuse protection
- DNS and email security, like SPF, DKIM, and DMARC records
- Front end and ad integrity
- Compliance, like privacy policy and cookie consent presence
How it works
This tool is different from the rest of the line. Instead of crawling page by page, it runs a fixed checklist against your site using a handful of targeted requests, a light sample of pages, and some DNS lookups. The homepage, robots.txt, and up to 15 internal pages are fetched once and shared across every check. You can export the results as an Excel file or a styled PDF report.
How to install Full Site Security Auditor
It takes about a minute. You only do this once.
- Download the zip file with the button on this page and unzip it. You will get a folder called
full-site-security-auditor. - Open the extensions page. In Chrome, type
chrome://extensionsin the address bar and press Enter. In Edge useedge://extensions, in Bravebrave://extensions. - Turn on Developer mode with the switch in the top right corner.
- Click Load unpacked and choose the unzipped folder (the one that contains
manifest.json). - Pin the icon from the puzzle piece menu in your toolbar, so it is always one click away.
Good to know
A few checks are left out on purpose because there is no reliable, free way to run them from a browser extension, such as Google Safe Browsing lookups and raw TLS handshake inspection. Nothing this tool finds is ever actively tested or exploited, it only flags things for you to review. This tool works in English only.
What the permissions are for
Chrome shows these when you install. Here is what each one is used for.
| storage | Save your settings and scan results in your browser. |
|---|---|
| unlimitedStorage | Store results for large sites with thousands of pages. |
| downloads | Save Excel and PDF reports to your computer. |
| tabs | Read the address of the tab you have open, so it knows which site to scan. |
| Access to websites | Load the pages of the site you scan, the same way a crawler does. |
Questions
Is Full Site Security Auditor free?
Yes. It is free to download and use, and the code is open source under the MIT license. You do not need an account, a subscription or an activation code.
Where are my results stored?
Your scan results and settings are saved in your own browser. The extension does not ask you to sign in, and you can delete everything by removing the extension.
Which browsers does it work in?
Google Chrome, and other browsers built on Chromium such as Microsoft Edge and Brave.
Does it attack or test my site in a risky way?
No. Nothing is actively exploited. It only looks at what is publicly visible and flags things for you to review.
How do I update it?
Download the latest zip from this page, replace the old folder with the new one, and click the reload button on the extensions page.
More free SEO extensions
Orphan Page Finder
Finds pages in your sitemap that no internal link points to.
Click Depth Mapper
Shows how many clicks each page is from your homepage.
Canonical Chain Tracer
Follows canonical tags and finds chains and loops.
Crawl Budget Waste Finder
Finds filter, tracking and session URLs that waste crawl budget.
Two MB Crawl Limit Monitor
Finds pages close to or over Googlebot's 2MB crawl limit.
Full Site Cache Auditor
Runs 54 checks on caching, CDN and DNS.