WEBSITE SECURITY & PRIVACY

PASSIVE · SAFE · 30 SEC

Know your website is safe, and exactly what to fix next.

KIPLOCK

Know your website is safe, private and exactly what to fix next. A free check of your site's security and privacy, in plain words. Takes about 30 seconds.

RUN A FREE CHECK

LIVE CHECK · yourbusiness.com

  • HTTPS on every page
  • “Reject” doesn’t stop tracking
  • Email can be spoofed (DMARC)
  • Certificate valid for 84 days

LIVE IN 195 COUNTRIES

35+

CHECKS

13

INDUSTRY PACKS

195

COUNTRIES

30s

TO YOUR SCORE

Free check

Try it on your site

A free check of your site's security and privacy, in plain words. Takes about 30 seconds.

Passive, respectful checks

Checks only what is public

We look at your homepage the way a visitor does.

Changes nothing on your site

No logins, no forms sent, no tracking triggered.

Results in about 30 seconds

With clear steps for anything worth fixing.

What Kiplock looks at

Six areas, in plain words.

Slack and Microsoft Teams

Alerts where your team already works

Connect a Slack or Microsoft Teams channel to any website you check, and Kiplock posts there as well as emailing you.

  • Your site goes down, and when it is back
  • A check finds new problems or the score drops
  • Your domain's DNS records change
  • Your site lands on a blacklist, or your domain is about to expire

Set it up in My websites: open a site, then Monitoring. It takes a minute, and we send a test message first.

How it works

  1. Step 1Enter your website address.

  2. Step 2Prove you own it by adding one DNS record.

  3. Step 3You get a score and a plain-language fix list.

What a report looks like

Sample report for an example site.

Your site scored 64. 1 thing needs fixing first. Each one has clear steps below.

Visitors who type http:// stay on the insecure versionFix first

Why it matters

Old links, printed cards and some browsers still open the http:// address. If it doesn't forward to https://, those visitors use your site without protection.

How to fix it

1. In your hosting panel or Cloudflare, turn on "Always use HTTPS". 2. The redirect should be a permanent (301) redirect straight to https://.

What we saw
200 http://example-clinic.com/

Severity: high

Ad or analytics trackers were detected loading before visitors agreeWorth fixing

Why it matters

These tools may send information about your visitors to other companies as soon as the page opens.

How to fix it

Add a cookie banner and load the listed trackers only after the visitor presses "Accept".

Severity: high

Your site uses a secure connection (HTTPS)Passed

Severity: critical