Know when your domain’s security gets worse.
External checks of email authentication, TLS, security headers and lookalike domains, and one email when something changes for the worse.
Free for one domain, scanned monthly. Weekly scans on Pro. No card required.
Four checks.
Every scan.
What an attacker sees from the outside, measured the same way every time, so you can tell when it changes.
Email authentication
SPF, DKIM and DMARC. Whether someone can send mail that passes as yours.
TLS
Certificates, expiry dates and protocol versions on your public sites.
Security headers
HSTS, CSP and the headers that protect your visitors’ browsers.
Lookalike domains
Newly registered domains one typo away from yours, the usual first step of a phishing campaign.
Your report, the moment it changes.
Grade, findings ranked by severity, what changed since the previous scan, and a recommendation for each item.
Down from B (88) at the previous scan
- MediumDMARC policy is p=none
- LowHSTS max-age below 6 months
- LowLookalike domain examp1e.com registered
- InfoNo CAA record
Sample data.
For teams without a security department.
Small companies, agencies and IT admins who need an outside view of their domains, not another platform to run.
- Nothing to install. One DNS record proves ownership.
- Plain-language findings with a fix for each one.
- Reports you can forward to a client or a manager.
One email when it matters.
You hear from us when the grade drops, a high-severity finding appears or a new lookalike domain is registered. Nothing else.
What changed on example.com:
– Grade dropped from B to C.
– New medium finding: DMARC policy is p=none.
Questions
Do you need access to my servers?
No. We only check public information: DNS records, your public websites and domain registrations.
Why do I need to add a DNS record?
To prove you own the domain. We never scan a domain whose owner has not verified it, and we check again before every scan.
What data do you store?
Your email, your domains and the scan results. The Privacy policy lists what we keep and for how long.
Can I cancel any time?
Yes. You keep access until the end of the paid period, with a 14-day money-back on the first payment (see Refunds).
Is the engine open source?
Yes: OpenOSINT, MIT-licensed, on GitHub. The hosted service adds scheduling, history and alerts.