Paste a URL and Recon Node runs around 40 checks on your site from the outside: TLS and certificate expiry, security headers, CSP, cookie flags, broken links, meta tags, soft 404s, exposed configuration files, SPF and DMARC, subdomain takeover, outdated JS libraries, scripts without integrity hashes, secrets in page source, CORS, CAA, DNSSEC. It also remembers your last scan. Run it again after fixing things and it shows what's new, what's still broken, and what went away.
I built this because I kept doing the same thing by hand across my own sites. One tool for security headers, another for the certificate, a DNS lookup for SPF and DMARC, Lighthouse for the page itself. Four tabs every time, and I still missed things.
The part I'm most pleased with is that it remembers. Most scanners hand you the same wall of text on every run, so you never find out whether the thing you fixed last month actually stayed fixed. Recon Node stores findings and dedupes them across runs, so the second scan tells you what's new, what's still there, and what went away.
It's free and you can try it without signing up.
What I'd most like is for you to run it on a site you know well and tell me where it's wrong. False positives are the thing I most want to hear about — I've only tested against sites I understand, so real ones will surprise me.