instware

Free tool · HTTPS & cookie check

Is every visit actually encrypted?

Confirm visitors are pushed onto HTTPS, that browsers remember to stay there, and that your cookies can't leak.

Light-touch: we load your homepage like a normal visitor (a few requests, no logins, forms or scanning) and read the response headers. We log each check — the domain, the result, your IP address, approximate location and browser details — to prevent misuse and follow up on results. See our Privacy Policy and Terms of Use.

Support free tools

Donations help us maintain and develop free security tools for everyone's benefit. Give any amount you like — every contribution counts.

Secure payment by Stripe. Donations are voluntary and non-refundable; nothing is provided in return.

More free tools

Security headers check

See which browser protections your homepage sends — and which are missing.

Email spoofing check

Check whether your SPF and DMARC records stop others sending email as you.