Discover 160+ free tools for web scraping, SEO analysis, OSINT, and more. 30 free uses every day — no signup required.
Mixed Content Checker scans HTTPS pages for HTTP resources (images, scripts, iframes) that compromise security. Active mixed content (scripts) is especially dangerous.
Active mixed content (scripts, iframes) can be exploited by attackers. Passive (images, audio) is lower risk but still flagged by browsers.
Keep exploring
Looking for more in Security? Try Email Security, CSP or Cookies — or browse the full Security collection .
You might also like
Check DMARC, SPF, and DKIM DNS records for any domain to assess email authentication and prevent spoofing.
Analyze Content Security Policy headers. Check for unsafe-inline, unsafe-eval, and wildcards.
Analyze cookies set by a website. Check Secure, HttpOnly, SameSite flags and compliance issues.
Test CORS configuration for vulnerabilities. Check wildcard, null origin, and credential leaks.
Take a content snapshot of any page — hash, word count, headings, links, and key element fingerprints for change detection.
Analyze H1-H6 heading structure, detect issues like missing H1 or skipped levels.
Looking for something specific? Browse all 158 Krawly tools