Skip to content

What the scanners actually check

CheckVibe, surface by surface

Reading 1 of 5

The outside of the site

Security Headers reads what the server sends back. SSL/TLS checks the certificate and protocol. DNS and Email Security covers records including SPF, DKIM and DMARC. Infrastructure and the three hosting scanners, Vercel, Netlify and Cloudflare, cover the platform. Origin IP Discovery checks whether your real server can be reached directly, bypassing the CDN in front of it.

  1. Passivewe only read
  2. Read-only probesends requests, changes nothing
  3. Auth-flow probeexercises login, opt-in
  4. Authenticateduses a granted credential

Every scanner carries a safety level. It is the answer to "will this break production?".