Enter a URL to begin

The page will be fetched server-side, sanitized of all active content, and rendered in an isolated iframe below.

Security Report

No page loaded yet

How It Works

1 URL is fetched server-side — your browser never contacts the target site
2 All scripts, iframes, objects, event handlers, and javascript: URIs are stripped
3 A strict Content-Security-Policy is enforced (no scripts, no forms, no connections)
4 All blocked elements are logged in the Security Report panel