Cloudflare
For sites on Cloudflare: the SSL mode, HTTPS and minimum TLS settings, whether traffic really goes through Cloudflare, and the DNS records (DNSSEC, SPF and DMARC, dangling CNAMEs) that leave a domain open to abuse.
30 checks in this group.
Generic
Cloudflare SSL/TLS Encryption Mode
Is the connection from Cloudflare to your server encrypted, and does Cloudflare check the certificate it finds there?
Cloudflare Always Use HTTPS
Does Cloudflare send visitors on http:// to the https:// version of your site?
Cloudflare Minimum TLS Version
What is the oldest TLS version Cloudflare will still accept from a visitor?
Site Traffic Goes Through Cloudflare
Is your site's own hostname proxied by Cloudflare, so the cache and firewall actually sit in front of it?
Cloudflare Security Level
How suspicious does Cloudflare have to be of a visitor before it challenges them?
Cloudflare Development Mode
Is Cloudflare bypassing its cache so every request reaches your server?
DNSSEC
Does the domain sign its DNS answers, so no one can forge them on the way to a visitor?
SPF And DMARC Records
Can anyone send email that claims to come from your domain?
Dangling CNAME Records
Does a CNAME point at a name that no longer exists, so someone else could register it and serve content on your domain?
Cloudflare Manages Your robots.txt
Is Cloudflare adding its own block to the robots.txt that crawlers receive?
Joomla
Cloudflare SSL/TLS Encryption Mode
Is the connection from Cloudflare to your server encrypted, and does Cloudflare check the certificate it finds there?
Cloudflare Always Use HTTPS
Does Cloudflare send visitors on http:// to the https:// version of your site?
Cloudflare Minimum TLS Version
What is the oldest TLS version Cloudflare will still accept from a visitor?
Site Traffic Goes Through Cloudflare
Is your site's own hostname proxied by Cloudflare, so the cache and firewall actually sit in front of it?
Cloudflare Security Level
How suspicious does Cloudflare have to be of a visitor before it challenges them?
Cloudflare Development Mode
Is Cloudflare bypassing its cache so every request reaches your server?
DNSSEC
Does the domain sign its DNS answers, so no one can forge them on the way to a visitor?
SPF And DMARC Records
Can anyone send email that claims to come from your domain?
Dangling CNAME Records
Does a CNAME point at a name that no longer exists, so someone else could register it and serve content on your domain?
Cloudflare Manages Your robots.txt
Is Cloudflare adding its own block to the robots.txt that crawlers receive?
WordPress
Cloudflare SSL/TLS Encryption Mode
Is the connection from Cloudflare to your server encrypted, and does Cloudflare check the certificate it finds there?
Cloudflare Always Use HTTPS
Does Cloudflare send visitors on http:// to the https:// version of your site?
Cloudflare Minimum TLS Version
What is the oldest TLS version Cloudflare will still accept from a visitor?
Site Traffic Goes Through Cloudflare
Is your site's own hostname proxied by Cloudflare, so the cache and firewall actually sit in front of it?
Cloudflare Security Level
How suspicious does Cloudflare have to be of a visitor before it challenges them?
Cloudflare Development Mode
Is Cloudflare bypassing its cache so every request reaches your server?
DNSSEC
Does the domain sign its DNS answers, so no one can forge them on the way to a visitor?
SPF And DMARC Records
Can anyone send email that claims to come from your domain?
Dangling CNAME Records
Does a CNAME point at a name that no longer exists, so someone else could register it and serve content on your domain?
Cloudflare Manages Your robots.txt
Is Cloudflare adding its own block to the robots.txt that crawlers receive?
Find out which of these your sites fail
Connect a site and every check in this group runs against it automatically, with the result and the fix in one place. These run twice a day on every connected site.
Run a free audit