What's your domain
exposing right now?
Non-intrusive scans. No login. No agent. Results in seconds.
Your email unlocks all scans and lets us send you the report.
Non-intrusive. We read public DNS and make the requests a browser or mail server would.
Choose a scan
Enter a domain above or directly in any card below
Email Security
Full passive audit of your email authentication stack. Find every gap before attackers do.
DNS Health
Check nameservers, CAA, DNSSEC, SPF, and dangling CNAMEs that could allow a subdomain takeover.
TLS / Certificates
Check certificate validity and expiry, TLS version and cipher, legacy TLS 1.0/1.1, HTTPS redirect, and HSTS.
MX Deep Dive
Audit every mail host: DNS resolution, reverse DNS (PTR) match, and STARTTLS support on port 25.
Domain Discovery
Find subdomains through certificate transparency logs and a sweep of common hostnames.
Brand Monitor
Find registered typosquats, other-TLD copies, and lookalike (homoglyph) domains of your brand.
HTTP Headers
Check CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and CORS.
Tech Stack Exposure
Fingerprint web servers, frameworks, and CMS platforms, and flag software versions your site gives away.
Crisis Readiness
Map your critical application stack and get an instant DR/BCP heatmap. ISO 22301 aligned, free.