What about 630 website checks showed me in the first week, and what they cannot show

DeployVet, a free website security and bug checking tool, conducted 645 checks on 633 unique domains during its first week of operation, from October 20 to 26, 2026. Of these, 260 domains (41%) received an A or B grade, while 372 domains (59%) received a C, D, or F grade. One domain did not receive a grade. The public counter reported 650 total checks as of October 26, 2026.

The 20 lowest-ranked sites were all C or below, with four receiving an F grade, nine a D grade, and seven a C grade. Conversely, the 20 highest-ranked sites all received an A grade, with one scoring a 95 and another a 100. These sites were not randomly selected, but rather ones individuals had chosen to test using the tool.

The checker examines only what visitors can already see without logging in or breaking any security measures. It checks if the HTTPS padlock works, if HTTP redirects to HTTPS, if browser safety settings are in place, and if private files are reachable. However, it is not a penetration test and cannot see behind logins or judge business logic.

The method notes and limitations of the tool should be read before quoting any of the findings. The checker queries a read-only results table in DeployVet's database, focusing on the latest grade per domain. The query ran from October 20 to 26, 2026, and only counted the most recent grade if a domain was checked multiple times. The 645 figure counts every check, including repeats, while the public counter showed a different number at times.

The checker is not a random sample, as it only checks sites people have chosen to test. Sites whose owners care about security or suspect problems may be more likely to use it, which may influence the numbers.