Unclassified // For public releaseUSA24 · Official security dossier
USA24 Public Cybersecurity Assessment Unit
Security assessment ·
Report ID—
Building analytics graphs from the report and public DNS…
Free tool · Passive website security check
Is your business website safe for your customers?
Enter your website address. We visit your public pages like a careful visitor would and check them for security problems: missing protections, unsafe scripts, hidden iframes, risky redirects, certificate issues and links to known malicious sites.
Start a check
- Read-only. We only load public pages, the same way a browser does.
- Polite. We follow your robots.txt and pause between requests.
- No attacks. No password guessing, no injection tests, no port scans.
Starting the check…
This usually takes 20–60 seconds.
Sample report: this is what a check of a site with many problems looks like. Run the tool on your own site to see your results.
USA24 · Public security-check registry
Latest security checks
Official register of the most recent automatic company security checks published by USA24. The ledger refreshes whenever a crawler check is published.
Showing 24 of 35 published most recent automatic security checks · timestamps UTC.
Registry updated 2026-11-02T09:28:31Z
What we check
Passive scan plus web-check-style analytics graphs — still read-only, no attacks.
Encryption
HTTPS, certificate validity and expiry, TLS version, and whether HTTP redirects to HTTPS.
Security headers
HSTS, Content-Security-Policy, clickjacking protection, nosniff, Referrer- and Permissions-Policy, cookie flags.
Scripts & content
Obfuscated or encoded JavaScript, crypto miners, card-skimmer patterns, hidden iframes, mixed content, missing Subresource Integrity.
Reputation & files
Redirect chains, other domains your pages use, open threat-intelligence lists, and hashes of linked files scanned for malware.
Web-check analytics
DNS, DNSSEC, TXT/CAA/MX, WHOIS age, carbon estimate, trackers, CDN hints, archives and more with animated gauges. Port scan, traceroute and Shodan stay off by policy.
Questions
Will this harm or slow down my website?
No. We fetch at most 15 public pages, one at a time with a pause between requests, and stop at any path your robots.txt disallows. It is the same traffic as one visitor clicking through your site.
Is this a penetration test?
No. A penetration test actively tries to break in. This check is passive: it reads what your site already shows to everyone and flags known warning signs. For a full test, hire a qualified security firm.
Can I check someone else's website?
Only with their permission. You must confirm you own the site or are allowed to check it before a scan starts.
Do you store my results?
Interactive tool results are kept in memory for about an hour so you can view them, then deleted. Download the JSON report if you want to keep it. Separately, the USA24 crawler publishes automatic OSINT security checks for software websites — those saved reports appear in the registry above (review page + security-report anchor) and at /your-domain/.
A finding seems wrong. What now?
Automated checks look for patterns, so some findings need a human look. Use the evidence shown with each issue to confirm it with your web developer.