A list of free online security scanning tools that help you quickly check your site against obvious weaknesses
- Observatory by Mozilla https://observatory.mozilla.org/ scans your website for missing security related server headers
- SSL Server Test https://www.ssllabs.com/ssltest/ tests the encryption strength of the SSL used in your https connection.
- CSP Evaluator https://csp-evaluator.withgoogle.com/ checks the security headers against XSS attacks