Mozilla Observatory

Mozilla Observatory: Analyzes Websites & Web Apps for Security

Mozilla Observatory analyzes websites and web apps, providing a security score and recommendations to improve security. It checks for outdated software, insecure settings, lack of security headers, and other common vulnerabilities.

What is Mozilla Observatory?

Mozilla Observatory is a free online tool by Mozilla that analyzes the security of websites and web applications. It scans for common vulnerabilities and misconfigurations and provides a letter grade score (A+ through F) to indicate the overall security level.

Some things Mozilla Observatory checks for include:

• Outdated server software with known vulnerabilities
• Missing security headers like CSP, X-XSS-Protection, etc.
• Mixed content issues (HTTP on HTTPS pages)
• Insecure cookies settings
• Subresource integrity validation
• Cross-origin resource sharing misconfigurations

After scanning a site, Observatory generates a report showing the score, grade, and list of passed and failed tests. It provides specific details on each vulnerability found and actionable recommendations on how to fix them to improve the site's security.

Mozilla Observatory is useful for web developers and security professionals who want to audit their websites and web apps for security issues during development and on an ongoing basis. With its approachable interface and detailed reports, Observatory makes website security testing easy to perform even for those without extensive security knowledge.

Mozilla Observatory Features

Official Links