Website Information & Security Checker

Website Information & Security Checker (WISC) helps you quickly review baseline security, authentication signals, and response performance for public websites.

Enter a domain to see SSL certificate status, key security headers, auth-related responses (cookies, tokens), and timing metrics on one screen.

Compare multiple sites side by side or export results as JSON for internal reporting and change tracking.

WISC is part of the MSV software line and can support web operations, compliance checks, and external site quality reviews.

Reviews basic TLS status: HTTPS connectivity, certificate chain, expiry, and hostname alignment.

• Certificate validity, issuer, and chain
• Hostname and SAN alignment
• HTTPS redirect and mixed-content signals
• Early warning for expiry and misconfiguration

Extracts and interprets headers related to web and browser security.

• Content-Security-Policy (CSP)
• Strict-Transport-Security (HSTS)
• X-Frame-Options / X-Content-Type-Options
• Referrer-Policy, Permissions-Policy
• Cross-Origin-Opener-Policy (COOP), Cross-Origin-Resource-Policy (CORP)
• security.txt and public security contact paths (when present)

Interpretation follows common best practices; required headers vary by architecture.

Reviews response headers, Set-Cookie, and token patterns that may relate to login, session, or API auth.

• Set-Cookie attributes (Secure, HttpOnly, SameSite, etc.)
• Auth/session headers and token patterns
• Compare public vs authenticated responses (when configured)
• Baseline browser storage and transport checks

Credential validation and auth logic require dedicated security testing.

Compare response metrics across multiple URLs or domains under the same run.

• TTFB (Time To First Byte)
• Total response time and status codes
• Side-by-side site comparison
• Track changes via repeated snapshots (within tool scope)

Export structured results for tickets, audits, and engineering follow-up.

• Structured header, certificate, and timing fields
• Batch export of comparison results
• Reference for before/after re-checks

Examples for client and internal sites supported by MSV:

• Pre-launch baseline security review
• Verify header policy changes (HSTS, CSP, etc.)
• Check Cookie attributes on login and API endpoints
• Benchmark response performance against peers
• Supplement compliance and external audit materials