Website security check
Menu

Website security check

See in a minute what to fix on your website.

We check the website and email settings anyone can see from outside. You get a score, a plain explanation and your first step. Free.

Enter the address only. No passwords or private links.

Whose website are you checking?
What should we check?

about 1 minute · security plus search and AI readiness

10–20 s · connection, email and browser settings

30–45 s · up to 20 pages

Terms and data use

Free short result · No account or bank card needed

OEJ · Website security checkSample result

oej.ee

80/100. Good.

80/100 · Good

1 finding needs review
0 suggestions
23 with no findings
5 not assessed

Your domain doesn't ask mailboxes to stop forged email

DMARC · p=none

Your DMARC rule is in monitoring mode only (p=none).

This is what your free short result looks like: a score, the main findings and one clear next step.
Public information only · No logins · No attacks · Results in about a minute

What we check

Four things visitors don't see, but that affect your customers

  1. 01

    Connection & certificate

    Does the browser open your site without a warning, and is your visitors' data encrypted on the way?

  2. 02

    Email spoofing protection

    Can someone send email that looks like it comes from your address? We look at your SPF, DKIM and DMARC records.

  3. 03

    Browser security settings & public code

    Does your site give browsers protective instructions, and is there anything in the public code that shouldn't be there?

  4. 04

    Search & AI readiness

    Can Google and AI assistants find your pages and understand what you offer? We read up to 20 pages.

What we check

Connection & certificate

Does the browser open your site without a warning, and is your visitors' data encrypted on the way?

Your own site. Or a partner's.

01

Check your own website

Find out where to start, and give your web administrator clear instructions.

  • See what is fine and what needs work.
  • Each finding says what it means and who can help.
  • Works for sites built with AI tools, too.
Check your website
02

Check a partner before you commit

Before you trust a supplier with your data or customers, see how they look after their website.

  • Public information only. The partner doesn't need to do anything.
  • You get specific questions to ask the partner.
  • The result starts a conversation. It is not a final verdict on the company.
Check a partner's website

How it works

Enter the address

For example oej.ee. No account needed.

See your free result

In about a minute you see your score, the main findings and your first step.

Fix it and check again

The full report has every instruction. After the fixes, check again for free within 30 days.

Example: our own website

We checked oej.ee first. Result: 80/100, Good.

We found one thing: email spoofing protection is in monitoring mode only. The finding says what to do and who can help.

Checked on 27.10.2026.

See the sample report

See it free. Pay only for the full report.

You see the short result right away, free. If you want every finding and all instructions, buy the full report.

Free short result

€0

Right after the check. No account or bank card needed.

  • A score from 0 to 100 and a level in words
  • The three most important findings in plain language
  • Your first step: what to do and who can help
Check for free

Full report

€29

Every finding, a fix plan and a free re-check.

includes 24% VAT (€5.61) · one-time payment

  • For each finding: what it means for your business and why to fix it
  • Instructions you can send to your web or email administrator
  • A plan: what to do now, within two weeks and within a month
  • PDF in Estonian and English + technical appendix
  • One free re-check within 30 days
See the sample report

You can buy the full report on the result page after the free check.

Before you start

Do I have to buy the full report?

No. You see the short result right away, free. Buy the full report (€29) only if you want every finding and instruction.

What does the score show?

The score shows how much we found to fix in the public checks. We start at 100 points and take points off for each finding: the more serious, the more. The score is not a certificate. See the full method

Is this a thorough security check?

No. We look only at what anyone can see from outside. A good result does not prove the site has no weaknesses. A thorough check needs access and a separate agreement. For a deeper check, write to info@oej.ee – we'll send a quote and explain how it works.

What don't you check?

We don't log in, fill in forms or attack the site. We can't see user accounts, internal systems or server settings. We list what we did not look at separately in the result.

Can I check another company's website?

Yes, its public side. The check sees no private data and doesn't tell you whether the company is trustworthy. Use the findings to ask the partner questions before working together.

Do I need an account?

No. An account is optional. Your result opens with a link you get right away. You can save results to an account to keep them in one place.

How long is my result kept?

30 days. After that the link no longer opens. An account or signing in does not extend this.

How do I pay and get an invoice?

You pay on Stripe's secure payment page by card, Apple Pay or Google Pay. The price is €29 including 24% VAT (€5.61). Stripe emails you the invoice right after payment. One free re-check within 30 days is included.

Can I get a refund?

Yes, if the fault is ours: the full report did not open or the check failed because of a technical fault on our side, we checked the wrong website through our mistake, or you were charged twice. Write to info@oej.ee within 14 days after payment.

Where does my data go?

We read public information only. DNS lookups go through Cloudflare and Google, and Stripe handles payments.

Can I have my website checked regularly?

Right now a check runs when you start it. A full report includes one free re-check within 30 days. Automatic repeat checks and email alerts are not available yet. If you need regular checks, write to info@oej.ee and tell us how many websites you want checked and how often.