Mixed Content Checker
An HTTPS page that loads images or scripts over HTTP is no longer fully secure. The tool lists the resources of a page that still use plain HTTP.
Checked by our server, free and without an account
Loading the tool …
What the tool looks at
- Scripts, styles, images and other files loaded over HTTP.
- Their addresses, so you can switch them to HTTPS.
How it works
- Enter the address. Only public web addresses on the standard ports are accepted.
- Our server fetches what the check needs once, with its own honest bot name, and evaluates it.
- You get the evaluated values with a short explanation. Nothing from the page is stored.
More Security tools
All tools- SSL Certificate CheckerCheck the SSL/TLS certificate of a domain – issuer, validity, expiry date and the names it covers.
- HSTS CheckerCheck the Strict-Transport-Security header of a site – set, how long it applies and whether subdomains are included.
- Content Security Policy CheckerCheck the Content Security Policy of a page – is the header set and which sources does it allow?
- Referrer Policy CheckerCheck the Referrer-Policy of a page – how much of its address is passed on when visitors follow a link.
- Server Signature CheckerCheck whether a server reveals its software and version in the Server header – useful information for attackers.
- Unsafe Forms CheckerFind forms on a page that send data over plain HTTP – passwords and personal data must travel encrypted.
- Safe URL CheckerCheck whether a URL is listed for malware, phishing or unwanted software by Google Web Risk.
The whole page in one audit
One audit runs more than 50 tests, rates them by severity and turns them into a score. Websites are re-checked on a schedule.