A health check for your website.
Find out in seconds whether your website is technically healthy: from SSL certificate and DNS to SPF, DMARC and security headers.
Free, no account needed.
SteadyHost checks availability, HTTPS, SSL, DNS, domain status and more.
Availability
Does your website respond, and how fast?
HTTPS & SSL
An encrypted connection, a valid certificate and modern TLS versions.
DNS & domain
Records, nameservers, DNSSEC, CAA and registration status.
Email security
SPF and DMARC against abuse of your domain.
Security
Security headers, mixed content and security.txt.
Do it yourself
Guides to what SteadyHost checks and how to set it up.
- Website down? How to find the cause
- HTTPS and redirecting HTTP to HTTPS
- How to check an SSL certificate is valid
- TLS versions: disable TLS 1.0 and 1.1
- Security headers explained, with examples
- Mixed content: http:// on an HTTPS page
- security.txt: where to report vulnerabilities
- DNS records explained: A, AAAA, MX and NS
- What is DNSSEC and how do you enable it?
- CAA record: who can issue your certificates?
- Check domain registration: status and expiry
- How to set up an SPF record for your domain
- How to check and set up a DKIM record
- What is DMARC and how do you set it up?
Frequently asked questions
What does SteadyHost check?
SteadyHost checks whether your website is reachable, whether HTTPS, the SSL certificate and the TLS versions are in order, which security headers your website sends, whether your homepage loads resources over http:// (mixed content) and whether you have a security.txt. SteadyHost also looks at your DNS records, DNSSEC, the CAA record and your domain's registration status, and whether SPF and DMARC protect your domain against email abuse.
Is SteadyHost free?
Yes. A check is free and you don't need an account. Enter your domain name and you'll get a report within seconds.
Does a score of 100 mean my website is secure?
No. The technical health score shows how the technical foundation of your website is doing. A high score doesn't mean your website is secure: SteadyHost is a technical check-up, not a security audit or penetration test.
How is the score calculated?
Each check is worth a fixed maximum number of points: availability 20, HTTPS 20, SSL certificate 15, security headers 20, DNS 10 and email security 15. A check with a warning earns part of the points. Checks that couldn't be run don't count. The checks for TLS versions, mixed content, security.txt, DNSSEC, the CAA record and domain registration are informational and don't count either. The report shows the points for each check.
Do you store my data?
We don't store the report and we don't use cookies. We count how many checks are run per day, and measure visitor numbers with Umami, without cookies and without personal data. The domain names you check are not included in that. You can read more in the privacy policy.
Why don't I see an expiry date for my .nl domain?
SIDN, the registry for .nl, doesn't publish an expiry date: a .nl domain stays active as long as your registrar renews it. That's why SteadyHost shows the registration status, but no expiry date.
Does SteadyHost check DKIM too?
DKIM requires a selector that your email provider chooses. SteadyHost automatically tries the selectors of common providers, such as "google" (Google Workspace) and "selector1" and "selector2" (Microsoft 365). If your provider uses another one, you can enter your selector in the report under Email security. You can also do this on the guide page about DKIM. DKIM doesn't count toward the score.
How often can I run a check?
To prevent abuse, you can start up to 10 checks per minute per IP address. After that, you can try again after a minute.