Vigavo for Framer
Your Framer site, checked.We stay awake.
Framer hosts the site. We check what you control: email DNS, your domain, code components and the embeds you added.
Free. No signup. Read-only checks from the outside.
What Vigavo checks on your Framer site
Code components and overrides are shipped to the browser; anything inside them, including keys, can be read by visitors.
Security check
Exposed keys in your custom code and embeds, email spoofing protection, domain expiry, risky subdomains, blacklists and mixed content.
Change alerts
We re-check on a schedule and tell you when something new appears, by email, Telegram, Slack or webhook.
An honest grade
Settings that Framer controls are shown separately and never lower your grade.
Managed by Framer
Framer runs the servers: security headers, TLS certificates, server software and compression are set by Framer for every site. Your report lists them under "Managed by Framer" so you know what they are, without asking you to fix them.
What you can fix
- ✓ Email DNS: SPF, DKIM and DMARC so nobody can send mail as you
- ✓ Your domain: renewal date, transfer lock, subdomains
- ✓ Content: search visibility, link previews, broken links
- ✓ Third-party apps, scripts and embeds you added
Tip: use a proxy or a serverless function for any API that needs a secret key.
Questions
Why don't missing security headers lower my grade on Framer?
Framer sets them for every site it hosts and gives you no way to change them. We show them under "Managed by Framer" and grade only what you can influence.
Do I need to install anything on Framer?
No. Paste your address and the check runs from the outside, like a visitor's browser. Nothing is added to your Framer site.
What happens when something changes?
We compare every scan with the previous one and alert you about new issues. If Framer changes a security setting on its side, you get one short notice.
Is the scan safe for my site?
Yes. We only make the same read-only requests any visitor's browser could make. Nothing is changed and nothing is exploited.
Other platforms