Your domain.
A clearer picture.
Check your public email and website configuration. Get an evidence-based snapshot and practical next steps.
Go deeper with ShadowScan.
Check your domain
Reviewing DNS, email policies, HTTPS, and website headers.
Public DNS queries and a small number of HTTPS requests. No login attempts, exploit testing, or port scanning.
Higher is better
What we observed
Evidence and next stepsPublic DNS records
Turn observations into a plan.
A free check covers the basics. ShadowScan adds a scoped assessment, validated findings, and prioritized remediation.
A snapshot, with context.
A transparent score
SPF and DMARC contribute 25 points each; HTTPS contributes 20; HSTS, framing protection, and nosniff contribute 10 each. The score reflects these observable controls, not your overall security or likelihood of a breach.
Unknown stays unknown
Unavailable checks are excluded from the score and clearly marked. A missing header is an opportunity to review configuration, not proof of an exploitable vulnerability. Policies inherited from parent domains are not evaluated.
Free, with clear limits
Completed results are refreshed once per domain every 24 hours. Incomplete results can be retried after five minutes. No account or marketing consent is required. Domain results and hashed request identifiers are temporarily retained to cache checks and prevent abuse; expired records are removed as new requests arrive.