Skip to content
PixelPrivate
Log inFree trial
Menu
Attack Surface & ExposureEmail & Brand ProtectionData ExposureTrust & CompliancePolicy & AccessPlatform overviewCEOs of growing companiesCFOs and finance leadersManufacturingSaaSE-commerceHealthcare and clinicsProfessional servicesAgencies and MSPsCyber-insurance readinessReal casesScenariosFree toolsLearnPricingLog inStart 14-day free trial

Free tool

HTTPS checker

HTTPS encrypts the connection between your visitors and your site. Having a certificate is not enough: visitors who type http:// should be sent to the secure version automatically. This checker verifies both.

No credit card. Only scan domains you own or are authorized to assess. PixelPrivate performs passive, public checks only.

What this checks

  • HTTPS loads successfully
  • Plain HTTP redirects to HTTPS
  • Number of redirect hops

How to use it

  1. Enter your domain.
  2. If HTTP does not redirect, enable “Force HTTPS” at your host or CDN.
  3. Consider HSTS once everything works over HTTPS.

Methodology and limitations

PixelPrivate performs passive checks against publicly visible configuration only. It does not test for exploitable vulnerabilities, so a clean result is not a guarantee of security. Read the full security methodology.

Key terms

  • HTTPS — HTTPS is HTTP carried over TLS.
  • HSTS — HTTP Strict Transport Security (HSTS) is a response header that tells browsers to only ever connect to your site over HTTPS..
  • TLS — TLS (Transport Layer Security) is the encryption protocol behind HTTPS.

Frequently asked questions

Is a padlock icon proof a site is safe?

No. It shows the connection is encrypted, not that the site is trustworthy. Phishing sites also use HTTPS.

Keep this check running automatically

Create a free account to save results, track your score and get alerted when something changes.

Create free account

Related tools

Related guides