Free external scan

See your domain the way an attacker does.

One scan checks DNS and DNSSEC, email authentication, HTTPS and security headers, issued certificates and registered look-alike domains. Real lookups, live results, no account needed.

Only public information is queried: DNS over HTTPS, the site's own HTTPS responses and Certificate Transparency logs. Results get a private share link.

  • DNSNS, DNSSEC, CAA
  • EmailSPF, DKIM, DMARC, MTA-STS
  • WebHTTPS, HSTS, CSP, headers
  • CertificatesTransparency logs, expiry
  • Look-alikesTypos, homoglyphs, mail
What we check

Forty-plus checks across five surfaces

Every finding comes with the evidence we saw and the exact change that fixes it.

Email you can't spoof

SPF syntax and lookup limits, DKIM on common selectors, DMARC policy and reporting, MTA-STS and TLS reporting.

A hardened front door

HTTPS reachability, redirects, HSTS strength, Content-Security-Policy, framing, MIME sniffing, referrer and permissions policies, version leaks, security.txt.

Names that look like yours

Typo, homoglyph and TLD variants of your domain, resolved live. Variants that accept mail are flagged first — they're how phishing starts.