External Security Check: website and email

See your domain the way an internet-wide scanner sees it. In under a minute you get a graded report on your website and on the email controls that stop spoofing and downgrade attacks, each finding with the fix and the standard behind it.

• Passive only: we read what a browser and a mail server receive, plus public DNS. No payloads, logins, path guessing or port scans.
• Website findings map to the OWASP Top 10:2025. Email findings follow the RFCs for SPF, DKIM, DMARC, MTA-STS and TLS-RPT.
• Check domains you own or manage. We do not store the address you enter; we keep anonymous daily counts only.