Guide

Web Scanner 1.3 for Chrome 116 or newer.

Your first scan

1. Install Web Scanner from the Chrome Web Store and pin it to the toolbar.
2. Open the site you want to check, then click the Web Scanner icon. Web Scanner fills in the address of the open tab.
3. Choose Scan this site for the security check, or Find broken links for a link scan.
4. The first time, Chrome asks to let Web Scanner read the site. Allow it. The extension does not ask for this when you install it.

You can keep working in the toolbar popup, open the side panel next to the page, or use Open in a tab from the menu for a full-width view.

Broken links

A link scan starts on the page you give it, follows links inside the site and checks external links once. The report lists broken links first, then redirects. Open a row to see every page that links to it and the link text.

• Open page opens that page with the broken link outlined.
• Filters switch between issues, broken links, redirects, external links and everything.
• Scan settings (the gear) set the delay between requests, how many pages are checked at once, folders to skip and whether external links are checked.
• With Pro you can scan a sitemap.xml or a list of URLs instead of crawling, and there is no URL limit. Set Maximum URLs if you want one; 0 means no limit.

The free version checks up to 150 URLs per scan. When a scan stops at that limit, the report says how many URLs were not checked.

Security grade

The security check reads the page and its response the way a browser does. It never sends attack payloads. It looks at:

• HTTPS and the redirect from HTTP, and Strict-Transport-Security
• Security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
• Cookie flags: HttpOnly, Secure, SameSite
• SPF and DMARC records of the domain, against email spoofing
• Files that should not be public, such as .env, .git/ or source maps, plus robots.txt and security.txt
• Script libraries with known versions and API paths found in scripts

Web Scanner sorts issues into Fix these first and Then. Notes and passed checks get their own lists and don't count against the grade. A site without HTTPS can't score above C.

With Pro, Whole site runs the same checks on every page the link scan found and shows which pages share each issue.

Fixes and reports

Each Pro finding shows the evidence from your site, why it matters and the fix. Web Scanner picks the server from the response headers when it can; switch between Nginx, Apache, Cloudflare, Next.js, Vite, Express and PHP yourself if it guessed wrong. Some fixes are an HTML tag or a DNS record instead. Rescan after you deploy to confirm the fix.

The free version lists every issue without the evidence and the fix. To see what Pro shows, choose Get Pro, then See a sample finding: it opens one finding from a demo scan of example.com.

Pro also has:

• Send to developer builds a plain-text summary with the fix code for an email, chat or ticket.
• Client report adds your name or logo and prints, or saves as PDF, in English or Turkish.
• Export saves the results as CSV or JSON.
• History keeps past scans on this device and shows what changed after a rescan.

Pro and your license

1. Choose Get Pro in the extension or on this site. Lemon Squeezy handles checkout.
2. Your license key arrives by email. In Web Scanner choose Get Pro, then I have a key, paste it and choose Activate.
3. One license works in up to 5 browsers. To move it, open the license panel from the menu and choose Remove from this browser first.

You can get a refund within 14 days: reply to your receipt email. A refunded license stops working.

When a scan goes wrong

Chrome did not let it read the site

Start the scan again and allow access when Chrome asks. No extension can scan pages like chrome:// or the Chrome Web Store.

Many links show 403 or 429

The site or its firewall is limiting requests. Raise the delay and lower the pages checked at once in Scan settings, then scan again.

A very large scan

Keep Chrome open until it finishes. If the extension restarts during a very large scan, Web Scanner keeps the issues it found so far, but the scan can't continue.

Still stuck? Open an issue or reply to your receipt email.