Arometer

Measure your domain's security posture.

Instant, passive scan of security headers, email authentication, and DNS hardening.

What Arometer checks
  • HTTPS enforcement and final redirect target
  • Security headers: HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy, COOP
  • Email authentication: SPF, DMARC
  • DNS hardening: DNSSEC, CAA
Rules & privacy

Only scan domains you own or have written permission to test. Arometer performs passive, non-intrusive checks. No data is stored beyond a short-lived anonymous rate-limit counter. Results are cached for 10 minutes.