Free monitoring & security tools
Each one answers a single question about your site, instantly, read live from the real thing — no signup, nothing stored. They're slices of the same checks Tell Me When Down runs around the clock for the sites it watches.
SSL expiry check
Expiry date, days remaining, and issuer — read live off your server. Catches expired, self-signed, and wrong-domain certificates.
Run the checkSecurity headers check
Pass/fail on the 8 headers that matter — HSTS, CSP, frame protection and more — graded with the same rules as our full scanner.
Run the checkCookie security check
Every cookie your site sets, checked for the Secure, HttpOnly, and SameSite flags. Names only — values are never read.
Run the checkMixed content checker
Finds every insecure http:// script, stylesheet, image, and iframe still loading on your HTTPS page — the usual padlock killer.
Run the checkSupabase pause check
One probe tells you whether your free-tier project is awake, paused by inactivity, or gone — without opening the dashboard.
Run the checkRender spin-down check
Checks whether your free-tier service has spun down — and if it has, times the cold start your visitors are sitting through.
Run the checkOr run everything at once.
The free security report covers all of this and more — headers, TLS, DNS, exposed subdomains, email spoofing protection — graded A to F, with a copy-paste fix for every finding.
every tool reads only what your site already shows the public · nothing stored