Hackal Run

Free security checks for your site.

Launching a new site? Point Hackal Run at your domain for a quick, surface-level sanity check on security basics that are easy to overlook: headers, email records, CORS, and exposed files. Every check is passive, on-demand, and free. No account needed.

Security Headers

Check your security headers and cookie flags (Secure, HttpOnly, SameSite).

Run

Email Auth

Check your domain's SPF, DKIM, and DMARC records.

Run

CORS Config

Check your site for cross-origin resource sharing (CORS) misconfigurations.

Run

Exposed Paths

Check for exposed .git and .env files, admin pages, and open directories.

Run

Beyond the spot-check

The quick look is just the start.

Unlike the tools on this page, the Hackal platform monitors your site's external attack surface continuously, and turns findings into prioritized, plain-English fixes.

See the platform