Website Security Health Check — Terms of Use

1. What this tool does

The Website Security Health Check is a free, passive tool. Exhaustively, one check performs:

• One HTTPS GET of the URL you enter, following up to five redirects, reading at most 512 KB of the response.
• One plain-HTTP GET of the same host, to see whether visitors are upgraded to HTTPS.
• Two TLS handshakes: one to read the certificate and negotiated protocol, and one deliberately capped at TLS 1.1 to test whether deprecated protocol versions are still accepted. Both are ordinary handshakes, identical to what any client performs on connection.
• Public DNS lookups for SPF, DMARC, MTA-STS, CAA and MX records.
• One request for /.well-known/security.txt.

It does not attempt to log in, guess passwords, submit forms, inject payloads, fuzz parameters, enumerate paths, crawl your site, or scan ports — connections are restricted to ports 80, 443, 8080 and 8443, and requests to private, loopback or cloud-metadata addresses are refused outright. Everything it reads is information your site already sends to every visitor.

2. Your responsibility

You may only use this tool to check websites that you own or that you are authorized to test. By running a check, you confirm that you have the necessary authorization. You are solely responsible for ensuring you have permission. Do not use this tool against any website without authorization.

3. Not a penetration test

Results are informational only and represent a passive best-practices check — not a full security audit or penetration test. It looks at a single unauthenticated request to one page, so cookies set after login, headers that differ per route, resources injected by JavaScript, and anything in your application logic are invisible to it. A passing result does not mean a website is secure. Checks that could not be completed are reported as untested rather than counted as passes, but the tool may still miss issues or, where a site behaves unusually, report a finding that does not apply. Nothing here is professional security or legal advice.

4. No warranty

The tool is provided "as is," without warranties of any kind, express or implied, including accuracy, completeness, or fitness for a particular purpose.

5. Limitation of liability

To the maximum extent permitted by law, Nishan Singh is not liable for any direct, indirect, or consequential damages arising from use of this tool or reliance on its results.

6. Privacy

To run a check, the tool processes the URL you enter and your IP address (used only for rate-limiting and abuse prevention). Results for third-party websites are not stored beyond returning them to you. See the site Privacy Policy for details.

7. Acceptable use

You agree not to: check websites you are not authorized to test; use the tool to overload, disrupt, or gain unauthorized access to any system; automate or abuse the service; or use results for any unlawful purpose. Access may be rate-limited or blocked to prevent misuse.

8. Changes & contact

These terms may be updated at any time. Questions: hacknhustle24@gmail.com · singhnishan.com