TRACE can enable cross-site tracing; PUT and DELETE can be abused to upload or delete files. We read only the Allow header from OPTIONS to see which methods are open — we send no changing request.
Read-only external check · free for personal use · daily monitoring for business
Check now, free →Enter one domain and we read only what anyone can see on the internet to gather the risks. We send no attack requests, separate hard evidence from heuristic signals, and write “not seen” for what we could not observe.