Unsafe forms checker
Unsafe forms checker finds explicit HTTP form actions on HTTPS pages. Review the listed destinations before checking forms and their security controls.
Unsafe forms checker: what this tool checks
Unsafe forms checker inspects form elements on a submitted HTTPS page and flags actions that explicitly begin with http://. This can help you find a contact form, search form, or older integration that sends visitors toward an unencrypted destination. The report identifies candidates for a closer implementation review.
How to use it
- Submit the full HTTPS URL of the page containing your forms.
- Review the count and the listed action addresses and methods.
- Inspect each affected form in its template, then verify the intended submission behavior in a suitable test environment.
Understanding your results
A zero count means no matching explicit HTTP action was detected in that fetched page. Relative or empty actions are not flagged by this rule. JavaScript-driven submissions, dynamically inserted forms, and later redirects need separate testing. Submitting an HTTP page does not produce the same HTTPS-to-HTTP check.
Frequently asked questions
Does this tool submit my forms?
No. It reads form markup and reports matching destinations. It does not fill fields, send personal information, or test the server handling a submission.
Does no warning mean the form is secure?
No. Encryption is only one concern. Authentication, validation, authorization, spam controls, and data handling require their own review; this narrow check cannot establish them.
Continue your review
Inspect broader HTTP references with the Mixed content checker, review certificate information using SSL Lookup, and examine response policies through the Content security policy checker.
Share
Similar tools
Mixed content checker flags HTTP references found on HTTPS pages. Review resources, links, and form actions before testing which ones affect browser loading.
SSL Lookup retrieves certificate details for a hostname and port. Review issuer and validity information to investigate HTTPS configuration problems. Check now.
Safe URL checker checks a URL against the threat lookup service. Review the result as one signal and avoid treating an unflagged link as a safety guarantee.
Popular tools
Meta tags checker lists property-based metadata from a webpage. Inspect descriptions, robots instructions, and sharing tags before updating page settings.
DNS Lookup displays available domain records, including address, mail, and nameserver entries. Review your DNS setup and investigate website connection issues.
Website hosting checker looks up the network behind a domain address. Review provider details and understand how proxies can affect hosting information.
Ping checks whether a website responds to an HTTP request and reports available timing and status details. Investigate website availability from this service.
HTTP headers lookup displays response header names and values for a URL. Inspect caching, redirects, server information, and security settings online.
IP Lookup shows geographic information for an IP address. Review location details, understand database limits, and investigate network addresses online.