Free external scan

See your business the way an attacker does

A passive check of your domain's email authentication, certificates and website security — the same external signals cyber insurers and auditors look at. Results in under a minute, explained in plain English.

Start your scan

Check your domain

Takes about 30 seconds. No account needed, and nothing is installed on your systems.

Just the domain — no https:// or www needed.
You'll see a summary on screen straight away. The detailed report comes by email.

We use your email to send the report and to follow up once. Nothing else. See our privacy statement.

What we check

Everything is passive — we only read information your domain already publishes. Nothing is probed, logged into, or installed.

Email authentication

Whether anyone can send email pretending to be your business — SPF, DKIM, DMARC policy and mail routing.

Certificates and encryption

Certificate expiry and chain, plus whether obsolete encryption protocols are still accepted.

Website security

Protective headers, clickjacking defences, and whether your server advertises its version to anyone asking.

What we don't do. No port scanning, no vulnerability probing, no attempt to access anything. This scan reads public DNS records and your website's response headers — nothing more.

Want a hand beyond the scan? See our cyber security services.