Free website security and SEO tools
Free, passive checks for leaked API keys, exposed files, security headers, indexability, AI-crawler access and cloaking. No signup needed.
- Leaked API key checker
Free tool that scans the JavaScript your website serves for leaked secret API keys from OpenAI, Anthropic, Stripe, AWS, GitHub, Supabase and more. Results are masked and never stored in full.
- Exposed .env and .git file checker
Free tool that checks whether your website publicly serves sensitive files such as .env, .git, wp-config backups, SQL dumps, .npmrc or source maps, with content verification to avoid false positives.
- Security headers checker
Free security headers checker. Test HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, SSL certificate expiry, TLS version and mixed content.
- Noindex and indexability checker
Free indexability checker. Find accidental noindex tags and X-Robots-Tag headers, robots.txt rules that block Google, missing sitemaps, off-site canonicals and broken pages.
- AI crawler access checker
Free tool that reads your robots.txt and shows which AI crawlers are allowed or blocked, including GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot, Google-Extended and CCBot.
- Redirect and cloaking checker
Free cloaking checker. Wardzo compares what Googlebot and a normal browser see on your homepage to detect hidden SEO spam, sneaky redirects and other signs of a hacked site.