Security headers
Shows browser-facing protections such as HSTS, CSP, X-Frame-Options, Referrer-Policy and related hardening signals.
Scantide Observe is the desktop browser extension for Chrome, Edge, Brave and Firefox. It analyzes the page you are currently viewing, explains browser-visible evidence, and shows how trackers, cookies, scripts, headers and infrastructure signals affect trust and privacy.
This page is specifically for the Scantide Observe browser extension. It is installed in Chrome, Edge, Brave or Firefox and reviews the active desktop browser tab using extension-style page visibility. That is different from Scantide Observe Mobile, which uses Android's Share menu because mobile browsers do not expose the same extension capabilities.
Scantide Observe Mobile is the Android companion app. It scans URLs shared from mobile browsers, email, chat and other apps through the Android Share sheet.
The goal is to make browser-visible behavior understandable. A finding does not automatically mean a site is bad. It means there is evidence worth understanding.
Shows browser-facing protections such as HSTS, CSP, X-Frame-Options, Referrer-Policy and related hardening signals.
Reviews visible cookie attributes such as Secure, HttpOnly, SameSite, third-party context and session-style behavior where available.
Highlights external scripts, inline scripts, iframes, widgets and other page dependencies that affect trust and exposure.
Adds provider, country, ASN and jurisdiction-related context when the relevant intelligence is available.
Reviews MX and mail-provider signals so teams can understand where account messages, resets and notifications may flow.
Higher score means higher observed risk. The score is useful because the extension shows which findings pushed it up.
Many browser safety products give a simple color, score or reputation label. That can be useful, but it often leaves the real question unanswered: what exactly caused the warning?
A website can look simple while loading analytics, ads, widgets, fonts, beacons, payment components and infrastructure from many providers. Scantide helps make that visible without making it scary.
Trackers may support analytics, ads, consent banners or behavior measurement. They are not always bad, but they can mean more companies are involved when you visit a page.
External scripts can add useful features such as maps, chat, payments or video. They also add dependency and supply-chain exposure because code is loaded from outside the website itself.
Hosting, mail, CDNs and analytics may be operated in different countries or by different providers. That can matter for privacy expectations, policy, regulations and user trust.
The extension works immediately after installation for local browser-visible checks. A valid Scantide Pro key can add richer tracker definitions, infrastructure enrichment, mail-provider signals and jurisdiction-aware context.
The normal workflow is simple: open a website, click the extension, review the hero score, then expand the areas that explain why the score changed.
Use the Chrome Web Store for Chromium browsers or Mozilla Add-ons for Firefox. Edge and Brave can normally use the Chromium listing.
Visit the page you want to review. Scantide performs fast local checks first so the popup can explain the most visible signals quickly.
The score is risk-oriented: higher means worse. Look at the primary driver badge to understand what is contributing most.
Use the detail panels to review cookies, scripts, trackers, forms, security headers, host context and mail infrastructure where available.
Do not judge a site by the number alone. Use the score as a shortcut to the evidence. A marketing site may legitimately use analytics and many embeds. A banking, health, government or login page deserves stricter expectations.
The side panels are meant to be educational as well as technical. They show evidence, explain impact and help different audiences interpret the same finding.
A fast summary of the current page. It helps you see whether the page looks clean, noisy, weakly configured or dependent on many external services.
Highlights known analytics, advertising, consent, fingerprinting, session replay and measurement systems where they are visible.
Shows whether important browser protections are present and whether the page has clear policy signals for modern browsers.
Shows contacted hosts, external scripts, beacons, forms, iframes and other page-level dependencies.
Shows provider, country, ASN, legal-context and sovereignty-related signals when available through Scantide intelligence.
Shows mail-provider and routing context so teams can see which providers may handle important account communication.
Understand whether a page is simple or noisy, whether it uses many trackers, and whether sensitive actions deserve more caution.
Spot missing headers, third-party drift, broad scripts, weak cookie attributes and infrastructure changes directly from the browser view.
Review visible data-flow indicators, provider concentration, mail dependencies and jurisdiction context in a way that is easy to explain.
Scantide Observe focuses on what the browser can see, then uses optional intelligence to add context around technologies, providers, hosting locations and legal exposure areas.
When visible headers, script names, framework clues or service hints suggest known software, Scantide can help flag that the technology may deserve a CVE review. This is not the same as proving that the website is vulnerable, because many systems hide versions, apply vendor backports, or sit behind managed platforms.
Hosting, mail, analytics, CDNs and third-party scripts may involve providers in different countries or ownership structures. Scantide shows those signals so users, IT teams and privacy reviewers can understand where data may travel and which legal or operational questions may be worth asking.
No. It is an evidence viewer with an explainable risk score. It shows what was observed so users and teams can make better decisions.
No. A higher score means more observed risk or complexity. It may be caused by trackers, weak headers, many external scripts, unusual infrastructure or policy-relevant providers.
No. Scantide Observe is designed around browser-visible evidence and supporting lookup intelligence. It is not a brute-force, exploitation or penetration-testing tool.
A valid Scantide Pro key can add updated tracker definitions, infrastructure enrichment, mail-provider signals, ownership context and jurisdiction-aware explanations.
The country, provider and ownership chain can matter for privacy requirements, legal exposure, internal policy, procurement rules and user trust.
Yes. The page and panels explain findings in plain language so users can understand what trackers, scripts, cookies and external services may mean.
Use the browser extension for live website review, the Android companion when mobile app sharing is better, and Scantide Online or Auditor for wider domain and network visibility.
Scantide is split into focused tools so the right audience gets the right kind of evidence quickly. Use Observe for live website behavior, Online for public domain checks, Dashboard for monitoring, and Auditor when you need authorized internal network visibility.
For Chrome, Edge, Brave and Firefox. Shows trackers, cookies, scripts, security headers, forms, contacted hosts and browser-visible website risk while you browse.
Open Observe guideFor Android users who want to share a URL from a browser or app and understand website privacy, scripts, trackers, infrastructure and jurisdiction context on mobile.
Open Observe MobileFor quick public-domain checks. Reviews visible TLS, DNS, headers, redirects, services, provider and jurisdiction signals for a website or domain.
Run single scanFor teams that need recurring certificate and domain visibility, status views, uploaded domain lists, expiry warnings and evidence history.
Open dashboard loginFor Windows admins reviewing authorized internal networks. Finds reachable hosts, visible services, web responses, TLS clues and CMDB gaps in clear HTML reports.
Open PowerShell AuditorFor mobile field checks and quick local network visibility. Useful for Wi-Fi review, nearby network context and on-site authorized infrastructure checks.
Open Android Auditor