Site Security Check
Inspect a site’s HTTPS upgrade, security headers and hosting — instantly and free.
Result for github.com
6/7Security headers
HTTP → HTTPS redirect
Strict-Transport-Security
Content-Security-Policy
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
Hosting
IP: 140.82.121.3
Reverse DNS: lb-140-82-121-3-fra.github.com
Network (ASN): AS36459 · GITHUB - GitHub, Inc., US
Server: github.com
More checks for github.com
How it works
- 1
We check whether http:// upgrades to https:// and read the live response headers.
- 2
We score the key security headers — HSTS, CSP, X-Frame-Options and more.
- 3
We resolve the IP, its reverse-DNS name and the announcing network (ASN) — all free.
FAQ
What is a good score?
Each present header (plus an HTTPS redirect) adds a point, out of 7. Most sites sit at 2–4; 5+ is strong.
Why does HSTS matter?
Strict-Transport-Security forces browsers to use HTTPS, blocking downgrade and cookie-stealing attacks.
Can you alert me if it regresses?
Yes — add the domain in @gmediatoolsbot and we’ll alert you if the HTTPS redirect or security headers change.