Purlock
Free tool · Website health check

Don't let your site expire by accident.

An expired certificate shows every visitor a security warning. An expired domain takes your site and your email down together. See how long you have, and whether the rest of your setup is sound.

Free, with no account needed.

What it checks

What you get from the website health check

  • SSL certificate

    Days left, who issued it, whether browsers trust it, and whether it covers this name.

  • Domain expiry

    When your registration ends, where the registry publishes it.

  • DNS

    Whether your domain points at a server, and whether you have a spare name server.

  • https

    Whether the site loads, and whether http redirects to https.

  • Security headers

    HSTS, Content Security Policy and the others, with the line to add for each.

For developers

Three lines from your own code

Every tool is also an API, with one simple answer format. Keep your key on your server.

JavaScript

const res = await fetch("https://www.purlock.com/v1/tools/website-health-check?target=yourshop.com", {
  headers: { authorization: `Bearer ${process.env.PURLOCK_API_KEY}` },
});
const report = await res.json();

Prompt for Cursor or Lovable

Add a call to the Purlock Website health check API on the server side of this app. Send GET https://www.purlock.com/v1/tools/website-health-check?target=VALUE with the header "Authorization: Bearer" and the PURLOCK_API_KEY environment variable. The JSON answer has status ("good", "attention" or "bad"), headline, checks (each with level, title, detail, fix) and data. If the call fails or times out after 3 seconds, carry on as if it wasn't there. Never put the API key in client code.

Free plan: 100 calls a month. Individual: 5,000. Business: 25,000.

FAQ

Questions, answered

What happens when an SSL certificate expires?
Browsers show visitors a full page security warning, and most leave. Payments and sign in usually stop too. Auto renewal is common, but it fails more often than people expect, usually after a DNS or hosting change.
Why is my domain expiry shown as not available?
Some country domains don't publish it. Check your registrar and turn on auto renew.
Are missing security headers a problem?
They're worth adding, but they don't break your site, so we list them without marking your site as unhealthy.
Is it free?
Yes, with no account. Daily monitoring and alerts come with an account.

More free tools

Use it from your own code

Get a free API key with 100 calls a month. No card needed.

Get your API key