A security report for a domain you own
Verify that you control the domain, confirm the scope, and get every finding with its severity, its business impact and the steps to fix it. Read-only checks, the same requests any visitor or mail server makes.
Nine passive checks, one report
TLS certificate
Trust chain, expiry, hostname match, revocation, key size and signature algorithm.
DNS and CAA
Records, nameserver redundancy, CNAME conflicts, and which certificate authorities may issue for the domain.
Email authentication
MX, SPF (including the lookup limit), DKIM keys and the DMARC policy that stops spoofing in your name.
HTTP security headers
HTTPS redirect, HSTS, Content-Security-Policy, clickjacking protection and headers that reveal software versions.
Domain registration
Registration expiry from the registry, so a lapsed domain does not take the site and email down together.
Severity and fixes
Each finding is rated Critical to Informational, explained in plain language, with fix steps and references (CWE, RFC, OWASP).
Ownership first, then the assessment
What it does not do
This is a passive assessment, not a penetration test. It does not scan ports, probe for vulnerabilities or attempt exploitation, and it only runs against domains you have verified.
- Add the hostname you want assessed.
- Prove you control it with a DNS TXT record, an HTML meta tag or a file. We check it again before every run.
- Confirm the scope and the assessment terms. The confirmation is recorded.
- Run the assessment and watch each check finish.
Included in Pro
Pro includes one full assessment report a month, plus a free retest within 30 days to confirm your fixes. Not on Pro? Buy a single report for $29. On the Free plan you can verify a domain and see its score.
See pricing