Your domain name, your mail and your website are passively examined across 95 points. You see at once what is wrong, what it means and what to do about it, in plain language.
Add as many domains as you like. Every free check-up lands straight in your overview.
Your mail can be forged. Someone can send an invoice today that appears to come from your address. Two other points need attention.
Illustration. Every report states the version of the check list it was made with.
From registration to reputation: below you see what each area covers, how many checks it holds and how many of them are free. The full list, with an explanation per check, is on the 95 checks page.
Registry status, locks against hijacking, DNSSEC linkage and the expiry date where the registry releases it.
13 checks, of which 6 free
Name servers, spread across networks, DNSSEC, zone transfers and settings that are quietly wrong.
26 checks, of which 8 free
SPF, DKIM, DMARC, MTA-STS and TLS-RPT, matched to what your domain intends: receiving mail, sending only, or neither.
26 checks, of which 7 free
Certificate and renewal, encryption versions, security headers, cookies, redirects and admin interfaces reachable from the internet.
20 checks, of which 5 free
Blocklists, certificates in public logs you do not know about, forgotten subdomains, and whether you can be reached by someone reporting abuse.
10 checks, of which 2 free
An email address and a domain name, nothing more. No access to your systems, no help from your IT partner. One domain or fifty, all checked for free.
We look at your domain the way an attacker does: DNS, registration data, mail settings, certificates, public logs and reputation sources. Without logging in, without changing anything.
A grade from A to F per domain, broken down per area, in your own overview. Each finding says what it means, what we observed and what you can do, with the standard it rests on. Want more? Upgrade per domain.
Passive, unless you ask otherwise. Without your consent we try no passwords, fill in no forms and exploit no weaknesses. Active tests, such as a zone transfer or a mail connection, run only on a domain whose ownership you have confirmed. What we cannot measure is shown as "not measurable" and costs you no points.
Lite is free and stays free. Extended is the in-depth examination of one domain, Ultra is continuous monitoring. All prices, tiers and differences are on the pricing page.
The snapshot. Enough to see whether something is wrong.
The in-depth examination, with a report to pass on.
Continuous monitoring, as insurance: you are warned before it goes wrong.
A report is out of date the day after it is made. The things that go wrong, go wrong quietly, and whoever is responsible for the domain is usually the last to notice.
Nobody sees it coming, until every visitor gets a red warning. For a web shop that is a day without orders.
Without a strict mail policy, someone can send an invoice today that appears to come from your address, to your own customers.
One hacked account and your domain is on a reputation list. Your mail stops arriving and you hear it from a customer first.
We only look up what is published: DNS data, certificates in public logs, registration data. The same information every browser and mail server requests to work with you. Active tests run only on a domain whose ownership you have confirmed.
A report ages. Certificates expire, DNS settings change, a server lands on a blocklist. Once a year is a minimum; those who really depend on it have it monitored continuously.
Usually the report confirms your partner does good work, and then you know that too. Where something is missing, you get a concrete point with the underlying standard, something you can forward without being technical yourself.
No card details, no salesperson on the line. A free account, your domain names and an honest grade for each of them.
Create a free account