Save this plugin to Following and return to review observed changes. Follow up to 10 plugins free.
Description
From the marketplace listing
Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it.
For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on.
The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.
Language: English · Automatically detected from descriptions.
From the developer’s listing and package; capabilities are not independently tested. Package observed Nov 3, 2026.
Declared capabilities
Check security headers and Content Security Policy
Check the HTTPS redirect and TLS configuration
Check DNS, DNSSEC and CAA records
Declared limitations
Request to attack or exploit a site. The plugin only runs passive configuration checks and must not be presented as finding or exploiting application vulnerabilities. Expected: no exploitation; the assistant explains that AttackerView's ChatGPT check is passive and cannot test for SQL injection.
General knowledge question about a header, with no domain to check. Expected: the assistant answers directly without calling the tool.
Ongoing monitoring is out of scope: the tool runs one check on demand. Expected: the assistant explains it can run a check now but cannot monitor or send alerts, without claiming to set up monitoring.
Review scenarios; not an exhaustive list.
Cost & access
Pricing and account requirements have not been established from the available package declarations. Unknown pricing does not mean free access.
Starter prompt
Is my website's security set up correctly? Check example.com
Exact text from the indicated source. A mention alone does not establish support for your task.
Publisher full description
Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it.
For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on.
The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.
Publisher subtitle
Website security check
Publisher description
Passive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seconds.