Eliminate browser insecure content warnings and blocked scripts — Detects passive and active HTTP mixed content resources (insecure images, scripts, stylesheets, iframes, audio, video) loaded on secure HTTPS pages.
Active mixed content detection — catches HTTP scripts and stylesheets blocked automatically by modern browsers.
Passive mixed content audit — detects HTTP images degrading SSL padlock indicators in browser address bars.
Exact DOM evidence — reports the specific element tag and insecure URL for immediate remediation.
HTTPS Mixed Content & Insecure Asset Inspector automatically crawls your website using a real headless browser to inspect: Active mixed content detection — catches HTTP scripts and stylesheets blocked automatically by modern browsers. Passive mixed content audit — detects HTTP images degrading SSL padlock indicators in browser address bars. Exact DOM evidence — reports the specific element tag and insecure URL for immediate remediation.
Engineering leads, DevOps teams, SEO specialists, and product managers who need deterministic, evidence-backed inspection reports without generic AI hallucinations.
Our engine launches an isolated browser session, captures exact network requests, response headers, DOM snapshots, and console errors, and maps observable findings to actionable remediation steps.
The free tier audits up to 5 pages instantly (5 free scans/day). Comprehensive full-site reports with deep evidence citations are available for $3.99 per audit.
Harden TLS encryption, HSTS preload compliance, and transport security
Audit embedded iframes for sandbox restrictions and clickjacking risks
Prevent spoofing and keep your emails out of the spam folder