LucidStack
Features
Solutions
Resources
Pricing

Free tool

Free audit of your website

Enter the address of your site: LucidStack tests it from three regions, checks its certificate, redirects, security headers and DNS, then gives it a score out of 100.

Result in 20 seconds, no account or e-mail needed.

Checks

What the audit checks

The same controls a LucidStack monitor runs day and night, run once.

Reachability from three regions

Your page is requested from Paris, Amsterdam and Warsaw: HTTP status, redirects followed and the response time of each region.

Response time

Beyond 1.5 s visitors feel it, and so does Google. The time measured runs from the first byte to the end of the page.

SSL/TLS certificate

Chain validity, covered name, authority, TLS version and above all the number of days before expiry.

HTTPS redirect and HSTS

An address typed as http:// must lead to https://, and the HSTS header must keep browsers from going back.

Security headers

Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy: four lines that close doors.

DNS and CAA

A and AAAA records, and a CAA record that limits who may issue a certificate for your domain.

Score

How the score is computed

One hundred points spread over what brings a site down or drives a visitor away; the letter sums it up: A from 90, B from 75, C from 60, D from 40, E below.

Site reachable 30 pt
Valid certificate, far from expiry 20 pt
Response time 15 pt
HTTP → HTTPS redirect 10 pt
Security headers 10 pt
Answers from every region 5 pt
HSTS 5 pt
DNS and CAA record 5 pt

Questions

Questions about the audit

Is the audit really free?

Yes, and without an account. The full PDF report is e-mailed if you ask for it; the follow-up e-mails only go out with your explicit consent.

Which sites can I audit?

Any public site over http or https. Private, local or reserved addresses are refused, and a given site is audited at most once every ten minutes.

Where do the requests come from?

From the LucidStack probes in Paris, Amsterdam and Warsaw, with the LucidStackBot user agent. A single page is requested per region.

Does the score replace monitoring?

No: it is a snapshot. A monitor runs these controls every minute and warns you before your clients do. Ten monitors are free.

Start monitoring in two minutes.

Add a URL, choose where to be alerted. LucidStack takes care of the rest, day and night.