Is this a penetration test?

No. It reads the public homepage, the certificate and the response headers. It does not try passwords or exploit the site.

Why is there sometimes no speed score?

The PageSpeed request runs only when the server has a key configured. The rest of the scan still runs.

Do you keep the address?

No. The address is used for the request and then discarded. An anonymous counter may increase by one.

Tools · Mail, DNS and sites

Website safety and speed

Enter a public address. We follow the redirects, read the certificate and the security headers, and check the title, description and main heading. Speed scores are added only when PageSpeed is configured.

Checks the public page only. Private networks are refused. Nothing you type is stored. A speed score appears when PageSpeed is configured on the server.

How to use it

Paste a public https address. Private and localhost addresses are rejected.
Read the header and redirect notes first. Those are the items that usually need a config change.
Treat the speed figure as a lab result. Run it more than once before you treat a single score as a fact.

Questions

Is this a penetration test?: No. It reads the public homepage, the certificate and the response headers. It does not try passwords or exploit the site.
Why is there sometimes no speed score?: The PageSpeed request runs only when the server has a key configured. The rest of the scan still runs.
Do you keep the address?: No. The address is used for the request and then discarded. An anonymous counter may increase by one.

An automated client can POST JSON to /api/tools/website-scan with url. The OpenAPI document is at /api/tools, with a short guide at /llms.txt. Nothing submitted is stored.