Skip to content
sporesec
Client loginFree intro call

Scan your site for free

Lighthouse scores for mobile and desktop, live security-header grading, and email-authentication checks that many tools skip. One graded verdict, one prioritized fix list.

  • No signup
  • About a minute
  • Nothing changes on your site

Scan public sites you own or are authorized to test.

https://example.comReady

7 checks run side by side, about a minute in all.

  • DNS and domain

    Your domain, how old it is, and whether it resolves

  • HTTPS and redirects

    Whether visitors reach the secure version of your site

  • Security headers

    The browser protections your server turns on

  • Email authentication

    SPF, DKIM and DMARC, which stop others from faking your email

  • Content and SEO

    Titles, headings, robots.txt, sitemap and AI readiness

  • Site reputation

    Whether Google flags your site as unsafe

  • Performance and accessibility

    Speed, accessibility, SEO and best practices from Google PageSpeed

Lab data by Google Lighthouse. Security and DNS checks run live at our edge. Free, no signup.

What the scan checks

Six checks in one scan: the four Lighthouse categories, plus the security and email posture most site owners never see.

Measured in the lab by Google Lighthouse

  • Performance

    How fast your site actually loads: Core Web Vitals (LCP, TBT, CLS), render-blocking resources, and the wasted bytes slowing you down. Slow sites lose visitors before the first click.

  • Accessibility

    Whether everyone can use your site: contrast, labels, keyboard navigation, and screen-reader support, mapped to WCAG. In Israel this is also a legal requirement (IS 5568).

  • Best Practices

    The engineering hygiene layer: HTTPS everywhere, no vulnerable libraries, safe cross-origin links, correct image ratios, and no console errors in production.

  • SEO

    Whether search engines can find, read, and rank you: crawlability, meta tags, structured data, mobile friendliness, and the basics that decide who shows up first.

Checked live from our edge

  • Security Posture

    Checked live at our edge, not by Lighthouse: security headers (CSP, HSTS, clickjacking), cookie flags, mixed content, and version disclosure, graded A to F. It is an automated read-only scan, not a certified assessment.

  • Email Authentication

    Can someone spoof mail from your domain? SPF, DKIM, DMARC policy, DNSSEC, and CAA, read straight from your DNS. Missing records mean phishable customers.

Arcana, the open-source tool for AI coding agents

Context intelligence for AI coding agents. 74 skills, cross-session memory, and MCP management. One npm install.

Without it, an AI coding agent loads everything and bloats its context, or loads nothing and does not know your stack. Arcana picks what fits.

Arcana gives Claude Code, Cursor, Codex, Gemini, Windsurf, and more agents budget-aware skill curation, output compression, and memory that persists across sessions. Seven platforms, no configuration required.

npm i -g @sporesec/arcana
View on npm

  • 74 Production Skills

    Frontend, backend, Go, TypeScript, security, testing, DevOps, and more.

  • Budget-Aware Curation

    Loads only the skills that fit your context budget, then compresses their output.

  • Cross-Session Memory

    Persistent project memory and MCP management across every session.

  • 7 Platforms, Open Source

    Claude Code, Cursor, Codex, Gemini, Windsurf, Aider, Antigravity. Apache-2.0 on npm.

Want a deeper analysis?

We walk through your findings with you and hand you a prioritized fix plan.

Book a free findings review

We build it. We look after it.

Free, 30 minutes, no sales deck. We ask about the problem, the goal, and what has been tried. If we fit, you get a fixed-price proposal.