No, our scanner performs completely passive checks that don’t interact with your website beyond what a normal browser would do. We don’t attempt any intrusive testing or vulnerability exploitation.

While we strive for accuracy, this is a surface-level scan of public-facing security features. For a comprehensive security assessment, consider professional penetration testing services.

For SSL issues, contact your hosting provider. For missing security headers, you may need to modify your server configuration files (like .htaccess for Apache) or implement them through your CMS. Always back up your site before making changes.

We recommend scanning after any major changes to your site or server configuration, and at least quarterly as part of regular maintenance. Critical sites should be scanned monthly.

Web servers sometimes reveal version information in headers. Even if you’ve updated your CMS, the underlying server software might need updating. Contact your hosting provider for assistance with server updates.