Mixed Content Checker
Paste HTML, find every insecure http:// resource that breaks HTTPS pads. Everything runs locally in your browser, nothing is uploaded.
About this tool
One http:// image kills the pad. Find every insecure reference before users do.
Why free, and what happens next
Tools like this one are how this desk stays findable: useful first, commercial when you are ready. When a tool surfaces a problem you would rather have fixed than diagnosed, start a project or run the cost calculator first. Everything runs client-side: your data never leaves this page.
More security tools
Security Header Checker
Paste response headers, get a security grade with fixes per missing header.
CSP Header Generator
Generate a Content-Security-Policy from what your page actually loads.
Permissions-Policy Generator
Generate a Permissions-Policy header for the APIs you allow.
HSTS Header Generator
Generate a correct Strict-Transport-Security header with preload decision.
security.txt Generator
Generate the file that tells researchers where to report vulnerabilities.
Cookie Security Checker
Paste Set-Cookie headers, audit flags: Secure, HttpOnly, SameSite.