Nexcore//Alliance
Blue Team

HTTPS SECURITY CHECKER

Validate web server TLS configurations, analyze transport layer security redirection protocols, and audit missing HTTP headers.

Target Host Parameters

Ownership Verification

Verify asset ownership before scanning

We require a same-organization work email plus a DNS TXT or HTTP file proof on your target domain.

1. Start2. Email3. Proof4. Scan

Use a company-managed email that matches the target domain or one of its approved subdomains.

What this checks

  • Email-domain match
  • Domain control proof
  • WHOIS / RDAP / DNS context

DNS and CDN changes can take time to propagate. If your proof is newly published, wait a few minutes and run the proof check again instead of starting a brand-new scan.

Checker Scope

  • Audits HTTP-to-HTTPS redirect logic to prevent cleartext token leakage.
  • Verifies Strict-Transport-Security (HSTS) policies and preload flags.
  • Inspects raw response headers to detect missing CSP, XFO, or XXP directives.