Unsafe Forms Checker
A form that posts to an http address sends its content unencrypted. The tool checks the forms of a page and lists those with an insecure target.
Checked by our server, free and without an account
Loading the tool …
What the tool looks at
- Forms whose action points to an HTTP address.
- The number of forms on the page.
How it works
- Enter the address. Only public web addresses on the standard ports are accepted.
- Our server fetches what the check needs once, with its own honest bot name, and evaluates it.
- You get the evaluated values with a short explanation. Nothing from the page is stored.
More Security tools
All tools- SSL Certificate CheckerCheck the SSL/TLS certificate of a domain – issuer, validity, expiry date and the names it covers.
- HSTS CheckerCheck the Strict-Transport-Security header of a site – set, how long it applies and whether subdomains are included.
- Content Security Policy CheckerCheck the Content Security Policy of a page – is the header set and which sources does it allow?
- Referrer Policy CheckerCheck the Referrer-Policy of a page – how much of its address is passed on when visitors follow a link.
- Server Signature CheckerCheck whether a server reveals its software and version in the Server header – useful information for attackers.
- Mixed Content CheckerFind resources loaded over plain HTTP on an HTTPS page – browsers block or flag them.
- Safe URL CheckerCheck whether a URL is listed for malware, phishing or unwanted software by Google Web Risk.
The whole page in one audit
One audit runs more than 50 tests, rates them by severity and turns them into a score. Websites are re-checked on a schedule.