Security header check + SSL monitor + CSP wizard
Instant check of your security headers and SSL configuration — then continuous monitoring with alerts on every regression. CSP wizard, HSTS, X-Frame, Permissions-Policy and Safe Browsing.
Security vulnerabilities on your website often go unnoticed for months -- until Google blocks the site or customer data is compromised. XICTRAQ regularly scans your website for SSL issues, missing security headers, suspicious third-party scripts and mixed content warnings. You receive a security score and actionable recommendations before attackers exploit the weaknesses.
Security header check + SSL monitor + CSP wizard features
SSL Certificate Monitoring
Monitoring of expiry date, certificate chain and configuration. Warning by default 14 days before expiry, then again at 7, 3 and 1 day, critical from 3 days. Detection of invalid certificates (expired, incomplete chain, hostname mismatch) and of long-lived certificates without automatic renewal. The free SSL check shows which TLS versions the server still accepts.
HTTP Security Headers
Check of Content-Security-Policy, X-Frame-Options, Strict-Transport-Security, X-Content-Type-Options and other security-relevant headers with rating.
Third-Party Script Inventory
The scan lists every third-party domain your page loads scripts, fonts, images or stylesheets from. From the Business plan, script integrity monitoring reports changed external scripts and checkout forms that suddenly submit to a new host.
Safe Browsing Check
Query of the Google Safe Browsing API. Immediate warning if your domain is blacklisted or classified as potentially dangerous.
Mixed Content Detection
Identification of HTTP resources on HTTPS pages. Mixed content leads to browser warnings and harms user trust and SEO ranking.
Cookie Analysis
Inventory of all set cookies with flag analysis (Secure, HttpOnly, SameSite). Detection of cookies set before consent is given.
How it works
Add your website
Enter your URL. XICTRAQ immediately performs a complete security scan and creates a baseline profile of your current security posture.
Configure regular scans
XICTRAQ checks automatically every 6 hours (paid plans) or every 24 hours (Free). In the notification settings you set the minimum security score below which you are alerted (default 50).
Fix security issues
Receive prioritized recommendations with specific instructions for remediation. After correction, XICTRAQ automatically verifies whether the issue has been resolved.
Frequently Asked Questions
Which security headers are checked?
How is the security score calculated?
Does XICTRAQ check my domain for security threats?
How far in advance does XICTRAQ warn about SSL expiry?
Can third-party scripts be blocked automatically?
How often are security scans performed?
Free security tools for instant testing
Test your website security posture right now — free, no signup:
Beyond the script inventory: XICTRAQ learns the SHA-256 hash of every external third-party script and alerts on unnoticed changes — a typical web-skimming signal. Available from the Business plan.