Fetch any public URL and check the security-relevant response headers — CSP, HSTS, X-Frame-Options, and more.
Only public, internet-routable hosts are checked. Private and reserved
IP ranges are refused.
Cookies & privacy
Unsurfaced uses cookies to understand how the site is used and to
measure advertising and affiliate referrals. Choose what you're
comfortable with — details in our Cookie Policy.
Cookie preferences
Decide which cookies Unsurfaced may use. Your choice is remembered
for 12 months and can be changed at any time via "Cookie Settings"
in the footer. See our Cookie Policy for details.
Strictly necessaryAlways on
Needed for the site to work — such as remembering this consent choice. These can't be switched off.
Let us see how the site is used so we can improve it (Google Analytics).
Measure ad performance and whether a click on an ad or affiliate link led to a sign-up or purchase (Google Ads and partner cookies).