Assessment
NOT RUNLocal checks run without requests. Network checks require confirmation and contact the named services. A green result does not guarantee a secure device or network.
SECURITY / DIAGNOSTICS
Security assessment
On-device checks, permission review and opt-in network tests. Findings describe observable risk signals, not claims that an attack occurred.
Local browser checks
Runs on this device without a network request.
Select Run local assessment.
Network-backed checks
Opt in to each test or run all together.
Website security headers
Checks response headers for this site's own origin: HSTS, CSP, X-Content-Type-Options, Referrer-Policy and framing policy.
Public IP / VPN indicators
Queries IP metadata through third-party services. Hosting ISP hints are not proof of VPN use.
Public resolver comparison
Compares DNS answers through independent DNS-over-HTTPS providers; does not inspect the OS resolver.
Site availability and jitter
Eight sequential requests to this site. Not ICMP ping, packet loss or DDoS identification.
Third-party HTTPS probes
Tests reachability to selected endpoints. A blocked CORS request is inconclusive, not a network fault.
No network checks performed.
Attack coverage
A browser cannot directly inspect packets, gateway ARP tables, active socket lists, running processes, antivirus state, extensions, full certificate chains or firewall events. No amount of webpage consent grants those capabilities. Local host monitoring or network-device logs are required for confirmation.
What to do if a result needs attention
For a certificate warning, stop and verify the URL; do not bypass the browser warning. For unexpected browser permissions, review site settings. If many devices lose connection, check your router and ISP status. For suspected account compromise, change credentials from a trusted device and enable MFA. DDoS and network intrusion investigations need router, firewall, host or provider logs.