Free Website Privacy Scanner

SurfaceScan™

Audit any website’s privacy exposure for free — JavaScript, cookies, third-party resources, fingerprinting signals, tracking services, and security headers — scored out of 100.

Static analysis · No JavaScript · Pure PHP + cURL

Scan a website

Fetches the target URL server-side via cURL, reads HTTP response headers, and analyses the static HTML for scripts, cookies, third-party resources, fingerprinting APIs, and known trackers. Results reflect static content only — JS-rendered SPAs may score higher than their true exposure.

Results

74 /100

kagi.com

Mixed — noticeable client-side footprint and some exposure.

Scan quality: full page retrieved — results are reliable

Category breakdown

JavaScript exposure 5/25

9 external scripts

Cookie footprint 20/20

No cookies set

Third-party surface 14/20

1 third-party domain: cloudflare.com

Fingerprinting risk 15/15

No fingerprinting signals detected

Tracking signals 10/10

No tracking or analytics detected

Security headers 10/10

All key security headers present

Key findings

9 external scripts — heavy third-party JS dependency.

Stateless — no cookies set.

1 third-party domain: cloudflare.com.

No fingerprinting API calls detected.

No analytics, pixels, or tag managers detected.

HTTPS confirmed.

Security headers present: CSP, HSTS, Referrer-Policy, X-Content-Type-Options, X-Frame-Options, Permissions-Policy.

How to improve

Self-host or remove external scripts to cut third-party JS dependencies.

Score detail

Scanned URL https://kagi.com/

Total score 74 / 100

Protocol HTTPS

JavaScript exposure 5/25 — 9 external scripts

Cookie footprint 20/20 — No cookies set

Third-party surface 14/20 — 1 third-party domain: cloudflare.com

Fingerprinting risk 15/15 — No fingerprinting signals detected

Tracking signals 10/10 — No tracking or analytics detected

Security headers 10/10 — All key security headers present

Scan quality Scan quality: full page retrieved — results are reliable

← Scan another site

My IP address and privacy header checker

Free IP and privacy header checker

See what your browser reveals

Check your public IP address, browser, operating system, and the privacy headers your browser sends, including DNT and GPC.

Open My IP →