01
Scan Your Site
Scan your site first to get your security grade, then add the badge.
Security Badge Widget
Show your security score.
Display a live security badge on your website. Build trust with visitors by showing your commitment to security.
Verified domain · monitoredLive badgeSample · current
example.com
Security by BoringSec
Sample · current
Badge Generator
Customize your badge and get the embed code
A grade is published only after verified ownership, current complete evidence, and separate consent for the public badge and score card. Partial, stale, private, or revoked evidence stays neutral.
Your Domain
Enter your domain without http:// or www.
example.com
A grade is published only after verified ownership, current complete evidence, and separate consent for the public badge and score card. Partial, stale, private, or revoked evidence stays neutral.
<a href="https://www.boringsec.com/en?utm_source=boringsec_badge&utm_medium=referral&utm_campaign=security_badge&utm_content=public_html" target="_blank" rel="noopener noreferrer">
<img src="https://www.boringsec.com/api/badge/example.com?style=full&theme=light" alt="Security Score" />
</a>Prove your security
Show visitors you take security seriously.
02
Scanned by BoringSec
A grade is published only after verified ownership, current complete evidence, and separate consent for the public badge and score card. Partial, stale, private, or revoked evidence stays neutral.
03
Embed Code
Customize your badge and get the embed code
Sample
Badge Examples
Full Style
Best for footers and about pages
Sample · current
Minimal Style
Best for headers and README files
Sample · current
Frequently Asked Questions
Ready to show your security?
Scan your site first to get your security grade, then add the badge.
How often does the badge update?
BoringSec sends the badge with no-store headers, so the next request reflects a new eligible scan or consent revocation. A host platform may still retain its own external copy.
What if my site hasn't been scanned?
The badge stays neutral until you scan the site, verify ownership, and explicitly enable the public badge and score card in domain settings.
Can I use the badge on any website?
After authorizing public proof for a domain you manage, you can embed its badge on a website, README, or documentation. CORS headers allow image embedding.
Is there an API limit?
Yes. The public endpoint is rate limited to protect availability. Normal embed traffic is supported, but no unlimited request claim is made.
Ready to show your security?
Scan your site first to get your security grade, then add the badge.