Check your domain's security in about a minute
We look at your email setup (SPF, DMARC, DKIM), DNS, website security headers and visible software versions. No signup.
Not sure what you will get? See an example report. It uses made-up sample data.
How it works
Enter your domain
Type the domain, like example.com. That is all we need. There is no account and nothing to install.
We run the checks
We look things up in public records and make one normal visit to your home page. You can watch each check finish.
Read your grade
You see a grade from A to F, a summary and the top issues. Add your email to get the full report with plain-English fixes.
What we check, and what we never do
What we check
- Email: SPF, DMARC, DKIM and related records.
- DNS: CAA records and DNSSEC.
- Website: HTTPS, your certificate and security headers.
- Software: versions we can see, matched against public vulnerability lists.
- Public databases: certificate logs, domain records and the open ports they already list.
What we never do
- Log in, submit forms or guess passwords.
- Send attack traffic or exploit code.
- Scan ports ourselves.
- Run the deeper checks unless you confirm you are authorised.
- Scan a domain whose owner has opted out.
Who it is for, and what you get
Who it is for
- Owners and managers who want to know where their business stands.
- IT staff and providers who look after a domain.
- Anyone who wants a quick, plain-English second look at a domain they own or manage.
What you get
- A grade from A to F and a score out of 100.
- The top findings, ranked by severity.
- The software versions we can see, with known issues for each.
- A private link to the full report by email: what we found, why it matters and how to fix it.
Ready to see where you stand?
The standard check uses public information only. The optional deeper check runs only when you confirm you are authorised.