Check your domain's security in about a minute
We look at your email setup (SPF, DMARC, DKIM), DNS, website security headers and the software versions anyone can see. Free, no signup, public information only.
Not sure what you will get? See an example report. It uses made-up sample data.
How it works
Enter your domain
Type the domain, like example.com. That is all we need. There is no account and nothing to install.
We run the checks
We look things up in public records and make one normal visit to your home page. You can watch each check finish.
Read your grade
You see a grade from A to F, a summary and the top issues. Add your email to get the full report with plain-English fixes.
What we check, and what we never do
What we check
- Email: SPF, DMARC, DKIM and related records.
- DNS: CAA records and DNSSEC.
- Website: HTTPS, your certificate and security headers.
- Software: versions we can see, matched against public vulnerability lists.
- Public databases: certificate logs, domain records and the open ports they already list.
What we never do
- Log in, submit forms or guess passwords.
- Send attack traffic or exploit code.
- Scan ports ourselves.
- Run the deeper checks unless you confirm you are authorised.
- Scan a domain whose owner has opted out.
The full list, and how to opt a domain out, is on the privacy page.
Who it is for, and what you get
Who it is for
- Owners and managers of small and medium businesses, anywhere, who want to know where they stand.
- IT staff and service providers who look after a domain.
- Anyone who wants a quick, plain-English second look at a domain they own or manage.
What you get
- A grade from A to F and a score out of 100.
- The top findings, ranked by severity.
- The software versions we can see, with known issues for each.
- A private link to the full report by email: what we found, why it matters and how to fix it.
How the grade works
The score starts at 100. Then we subtract:
| Finding | Points removed |
|---|---|
| Failed check, high severity | 15 each |
| Failed check, medium severity | 8 each |
| Failed check, low severity | 3 each |
| Warning | 2 each |
| Software match that is being actively exploited | 10 each, up to 30 in total |
| Other software matches | 2 each, up to 10 in total |
The lowest score is 0. The grade comes from the score:
- A90 or more
- B75 or more
- C60 or more
- D40 or more
- Fbelow 40
Free security tools
Both work in your browser. The password you type is never sent to us or stored.
Password strength checker
See how strong a password is and how long it would take to crack.
Password leak check
Find out whether a password has appeared in a known data breach.
Ready to see where you stand?
The standard check uses public information only. The optional deeper check runs only when you confirm you are authorised.