Website Check

Website Check gives a plain-language safety summary of a website, built for veterinary clinics and other small practices.

Give ChatGPT a website address and the check reads the site's public pages and public records: the same things any browser or email server can see. Nothing is installed, no login is needed, and nothing on the site is changed.

What it checks:

• Out-of-date software: WordPress core, plugins and themes, Joomla, Drupal and PHP, compared with public data from Wordfence Intelligence, the CISA Known Exploited Vulnerabilities list and endoflife.date.
• Secure connection: whether HTTPS works, when the certificate expires, whether visitors are sent to the secure version, and files loaded without encryption.
• Browser protections: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy.
• Domain: how soon the domain registration expires.
• Email: whether SPF and DMARC records protect the domain against email that pretends to come from it.

Results come back grouped as Urgent, Important, Good to fix and Working, each with one plain sentence. The summary leaves out software names and version numbers. A link offers the full details: software versions, known flaws with their CVE IDs, and the evidence behind each result. They are emailed only to an address at the checked site's domain or one published on the site.

A clean result means none of these checks found a problem. It is not a full security audit.