Free tool · No sign-up

How secure is your business domain?

15 expert checks across your email, website, DNS and domain, then a graded report with plain-English fixes you can copy and paste.

Please only scan domains you own or manage. We never log in to, attack or break into anything. We only use public information: DNS, normal web requests and public records such as certificate logs and the domain registry. We keep a record of the domains scanned and their results.

Not sure what you will get?

15 checks ready

Email security

  • SPF
  • DKIM
  • DMARC
  • Mail routing & transport security

Website security

  • HTTPS enforcement
  • TLS certificate & encryption
  • HSTS
  • Browser security headers
  • Information leakage & cookie hygiene
  • Outdated software & libraries

DNS & domain

  • DNS hardening (DNSSEC, CAA, nameservers)
  • Subdomains & exposed test systems
  • Dangling DNS (subdomain takeover)
  • Lookalike domains
  • Domain registration & expiry

Every check runs for real against your live DNS, website and public records.

What you get

A report you can act on

Every finding says why it matters and exactly what to change, built from what we find on your own domain.

Live results

15 checks run against your real DNS, certificate and website, plus public records such as certificate logs and the domain registry.

Plain English, ready to copy

Ready-made DNS records and server settings for the issues we find, with the effort each fix is likely to take.

Safe and private

Only public information is used. Nothing is installed and nothing on your systems is touched.