Free · no install · no agent

Check your company's outside doors

We look at your company exactly the way an attacker does from the outside — public records only, nothing touched, nothing installed. One free check per domain every 30 days.

• · Can anyone send email pretending to be you? (SPF, DMARC)
• · Is your site forcing encrypted connections? (HTTPS, HSTS)
• · Can a card skimmer run on your checkout? (Content Security Policy)
• · Are you telling attackers which software version you run?