GuardPad vs DOM Lens

See what needs fixing on your site — and verify the improvement. GuardPad scans a website's security configuration from your iPhone or iPad, shows the three fixes that matter most, explains each one in plain language, and — after you change your server — rescans and tells you finding by finding what is resolved, still present, new, or could not be verified. Built for freelance developers and small web agencies who look after client sites. Try every PRO feature free for 3 days. No account. No analytics. Scans run on your device. UNDERSTAND • An A+ to F grade that summarises the checks performed — with a clear note that a grade is not a guarantee of security or a certification • 11 graded HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP, CORP, X-XSS-Protection, Server) • SSL/TLS certificate and protocol details, including post-quantum key exchange detection • Cookie flags (Secure, HttpOnly, SameSite, __Host- prefix) • Email security: SPF, DMARC, DKIM, MTA-STS and BIMI • Redirect chain, deprecated headers, security.txt, WAF/CDN fingerprints • OWASP Top 10:2025 and PCI DSS 4.0 header check mapping FIX • "Fix first" — your highest-impact issues at the top of the results • For every finding: what was observed, why it matters, and what to change • PRO: server config snippets for nginx, Apache, Express.js and Caddy VERIFY • Rescan to verify: each earlier finding is marked Resolved, Still present, New or Not verified • An unchanged overall grade never hides a finding you fixed • Incomplete scans (for example when the web server is unreachable) are never counted as fixed • PRO: PDF and Markdown reports that include what was verified since the previous scan FOLLOW UP (PRO) • Pin up to 5 domains; when iOS allows, GuardPad re-scans them in the background and notifies you only when a grade or header changes. Each pinned domain shows when it was last checked. Background re-scans are periodic, not continuous. Yearly covers all pinned domains; Lifetime covers 1. • Certificate expiry reminders 30/14/7/3/1 days before expiry • Grade trend charts, posture dashboard and scan comparison • Batch scan up to 50 URLs, CORS tester, DNS lookup with DNSSEC and CAA, full certificate chain • Shareable grade card and README badge NATIVE ON iOS • Share Extension — scan a URL straight from Safari • Siri & Shortcuts — "Scan Domain" and "Get Last Grade" • Home Screen and Lock Screen widgets for pinned domains • Optimised for iPhone and iPad FEEDBACK Spotted an incorrect result? Report it from the finding itself. You see the full message before anything is shared, and you send it yourself from Mail. PRIVACY No account, no analytics SDKs, no tracking, no third-party dependencies. Scan results stay on your device. GuardPad is a tool for checking the configuration of websites you own or are permitted to scan. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://olofpetterson.github.io/op-apps/guardpad/privacy.html?lang=en

Understand the webpage you can see—by tapping it. DOM Lens is a visual web inspector for iPhone and iPad. Open a URL, tap an element, and move from appearance to DOM and CSS without a Mac. It is made for designers, frontend developers, QA testers, and anyone learning how interfaces are built. INSPECT BY TOUCH • Live DOM, attributes, CSS selector, and XPath • Matched CSS rules, specificity, and computed styles • Box model for margin, border, padding, and content • Page-wide CSS selector search with multi-element highlighting • Live CSS editing with undo and redo • Console logs and errors, plus JavaScript execution • Network request metadata without collecting request or response bodies • Page Audit for metadata, headings, Open Graph, JSON-LD, and missing alt text BUILT FOR IPHONE AND IPAD The touch-first element picker and tracking highlight make real pages easy to inspect. Use the stepped panel on iPhone or the spacious split view on iPad. A visible progress indicator shows page loading and analysis status. An included sample page lets you try the workflow offline. The interface is available in English, Japanese, Korean, Spanish, Brazilian Portuguese, French, German, and Italian. AI DESIGN PACK — OPTIONAL ONE-TIME PURCHASE Package the selected element’s annotated screenshot, DOM, CSS, box model, design tokens, Page Audit, and implementation brief as a searchable PDF, Markdown, and JSON. The files are structured for handoff to AI tools or teammates. Exports are generated on device with no usage limit. PRIVACY BY DESIGN Web sessions are non-persistent. Form values, cookies, storage, credentials, and network request or response bodies are excluded from exports. The websites you open still receive the ordinary web requests needed to load their pages. Core inspection tools are free. AI Design Pack requires an optional one-time in-app purchase. There is no subscription.