Scan consoleguard / new scan

Ready

Free security self-check for university sites

Before the official audit,check your site's security

Enter an address. We check what is visible from outside, without attacks, and give a score with plain fixes.

BetaThis is a beta service. If a result looks wrong, .

See a sample result

AreaWhat we checkStatus

  • TLSTransport securityTLS version, certificate expiry and trust, HTTP to HTTPSWaiting
  • HDRSecurity headersHSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, server infoWaiting
  • CKECookiesSecure, HttpOnly, SameSite on session cookiesWaiting
  • MIXContent integrityHTTP content mixed into HTTPS pages, forms that submit without encryptionWaiting
  • INFInformation disclosureComments, emails, internal IPs, error text, server paths and secret keys shown in pagesWaiting
  • CMSTech stackGnuboard, Youngcart, XE, Rhymix, WordPress versions and end of supportWaiting
  • DNSDNS and mailSPF, DMARC, CAA (mail spoofing)Waiting
  • LAWKorean legal noticesPrivacy policy, privacy officer, terms and business information notices; resident number fieldsWaiting
  • EXTExternal resourcesIntegrity of external scripts (SRI); expired or unregistered third-party domainsWaiting
  • EXPExposed files.git, .env, backup files, directory listingAfter verification
  • No attackssurface only
  • Korean CMSversions
  • About 30 secondsscore and fixes
  • Free

Scope and limits

What we check, and what we do not.

  • 1

    Anyone

    Surface only, no attacks

    We load the front page and responses like an ordinary visitor. Attack testing such as logging in or entering attack strings is excluded.

  • 2

    Members · Verified

    Deeper after verification

    Verify with a DNS TXT record or a file to check exposed files and more pages.

  • –

    Limits

    Not a safety guarantee

    It finds problems visible from outside ahead of time and does not replace a penetration test.

Made for Korean sites

Checks tuned for Korean sites

Unlike generic tools that only check headers and certificates, we also look at common Korean setups.

CMS

Korean CMS versions

Detects Gnuboard, Youngcart, XE, Rhymix and WordPress, and warns about end of support.

FIX

Fixes for Gnuboard sites

Fixes come as nginx, Apache and PHP examples. Detailed scans also flag leftover install folders and open data folders.

KISA

Ready for audits

Each item lists KISA, OWASP and CWE codes. A Korean PDF report is available.

A–F

Plain-language report

Five risk levels and a grade (A to F) show what to fix first.

점검 전에 무엇을 보는지 알고 싶다면

기관이 쓰는 웹 취약점 표준 점검 항목 21개 가운데 바깥에서 확인할 수 있는 것과 정식 진단이 필요한 것을 나눠 두었습니다. 자가 점검 순서와 결과 읽는 법은 안내서에 있습니다.

홈페이지 취약점 점검 가이드 보기

How it works

  • 1

    Free scan

    Enter an address and the scan usually finishes in 10–30 seconds.

  • 2

    Plain report

    Score, risks and fixes on screen and in PDF.

  • 3

    Talk to us

    If you cannot fix it yourself, request a quote right from the result page.

  • 4

    Build and maintain

    DICOLAB handles fixes (maintenance and security work) and ongoing scheduled care.

Got results but no one to fix them?

DICOLAB can fix them for you

We fix security settings and outdated components on Gnuboard, Youngcart and WordPress sites, then re-check and report.