Skip to Content
JAXIOF
Donate

Online Resources

Website security scanner

Free outside-in check of a website's HTTPS, security headers, and email protection. No account needed.

Scan a website

We read the homepage the way a browser does. We check the certificate, the headers, public files, and email DNS. This is an outside look. It does not open a login or prove a site is free of bugs.

Scan mode

Usually under a minute. Slow sites take longer because it waits and retries instead of skipping.

Only scan sites you own or have permission to test. Results are a starting point, not a full security audit.

Our security commitment

JAX IOF protects visitors, members, and donors with modern web security.

  • A+ rating on Mozilla Observatory (recommended by CISA, the Cybersecurity and Infrastructure Security Agency)
  • Encrypted connections only (TLS 1.2 and 1.3, with HSTS)
  • Strict Content Security Policy and anti-clickjacking protections
  • Signed DNS (DNSSEC) and email anti-spoofing (SPF and DMARC)
  • Payments are processed by Stripe; we never see or store card numbers
  • Bot protection on public forms
  • Security review completed: November 2026

Found a security issue? Please tell us privately. We appreciate responsible disclosure.

Get the JAX IOF App

Stay Updated

Install