A CVE is the public, official record of a specific security problem in a piece of software. Each has an id like CVE-2021-41773. When a version of software you run has a CVE, it means a known weakness exists in that version and is usually fixed by updating.

Is this safe and legal to run on my own site?

Yes. We only read what your website already shows every visitor. We do not test it, scan it or log in, so nothing is touched or changed. Only check websites you own or are allowed to check.

You found a problem — does that mean I was hacked?

No. It means your site publicly shows a version of some software that has a known weakness. Updating that software to the fixed version is usually all it takes. We are glad to help.

You found nothing — am I safe?

It is a good sign, but not a guarantee. We can only see what your site reveals publicly. A full review looks deeper than this free check can.

Free CVE check

Does your website have a known security problem?

Type your website address. We confirm it is online, read the software and version it shows to every visitor, and tell you plainly which known security problems (called CVEs) could affect it.

We never test, scan or log in to your site. This is a reading of public information, so it is an indication to check, not a verdict.

How this check works

No agent, no login, no access to your server. Three simple steps, all on information your website already shows every visitor.

1. We confirm your site is live

We look up your website name and open its front page once, the way a browser does. If nothing answers, we tell you — there is nothing to check on a site that is offline.

2. We read the software it shows

A website quietly announces what it runs — for example Apache, nginx, PHP or WordPress and its plugins — and often the version. We read only that, nothing else.

3. We match it to known problems

We ask the official public problem database (NVD) which known security problems affect those exact versions, and rate each one P1 (most urgent) to P5.

What P1 to P5 mean

The rating comes from the official score out of 10. It says how serious the problem is. How sure we are it applies to your site is shown separately.

P1Critical. Very serious — fix it right now.
P2High. Serious — fix it this week.
P3Medium. Worth fixing — plan it in.
P4Low. Small risk — fix it when convenient.
P5Info. No score given — good to know about.

What this check cannot tell you

This is a free, public reading of what your website shows. It is a helpful starting point, not a full security review.

It reads public information only. It does not test your site, so a result is an indication to verify, never a confirmation.
It can only see software your site reveals. A site that hides its versions, or runs software we do not yet recognise, may still have problems this check cannot see.
A clean result does not mean your site is safe. It means nothing obvious showed up in what is public.
Finding a problem does not mean you have been attacked. It means a version with a known weakness is on show and worth updating.

What we do and do not do

We read only what your website shows every visitor — its response headers and front page.
We never test for weaknesses, never try to break in, and never log in.
We store nothing from this check. Close the page and it is gone.
We never ask for a password, and we never will.

Common questions

What is a CVE?: A CVE is the public, official record of a specific security problem in a piece of software. Each has an id like CVE-2021-41773. When a version of software you run has a CVE, it means a known weakness exists in that version and is usually fixed by updating.
Is this safe and legal to run on my own site?: Yes. We only read what your website already shows every visitor. We do not test it, scan it or log in, so nothing is touched or changed. Only check websites you own or are allowed to check.
You found a problem — does that mean I was hacked?: No. It means your site publicly shows a version of some software that has a known weakness. Updating that software to the fixed version is usually all it takes. We are glad to help.
You found nothing — am I safe?: It is a good sign, but not a guarantee. We can only see what your site reveals publicly. A full review looks deeper than this free check can.

Related guides

Want help fixing what we found — or want this watched for you?

We can confirm which problems really apply to your site, fix them safely with your permission, and keep an eye on your website so you hear about a new problem early. Tell us your website and what you run, and we will talk through what makes sense.

Talk to our security team See how our monitoring works

Also free: see the security signals the same website hands to every stranger on the internet →