See your business the way an attacker does
A passive check of your domain's email authentication, certificates and website security — the same external signals cyber insurers and auditors look at. Results in under a minute, explained in plain English.
Check your domain
Takes about 30 seconds. No account needed, and nothing is installed on your systems.
What we check
Everything is passive — we only read information your domain already publishes. Nothing is probed, logged into, or installed.
Email authentication
Whether anyone can send email pretending to be your business — SPF, DKIM, DMARC policy and mail routing.
Certificates and encryption
Certificate expiry and chain, plus whether obsolete encryption protocols are still accepted.
Website security
Protective headers, clickjacking defences, and whether your server advertises its version to anyone asking.
What we don't do. No port scanning, no vulnerability probing, no attempt to access anything. This scan reads public DNS records and your website's response headers — nothing more.
Want a hand beyond the scan? See our cyber security services.