Scan any domain for email authentication, TLS health, WHOIS integrity, and subdomain takeover risk — in seconds.
| Check | Why it matters | Weight |
|---|---|---|
| DMARC policy | Prevents spoofed email sent from your domain | 25 pts |
| SPF record | Authorises which servers may send mail for you | 10 pts |
| DKIM selector | Cryptographic email signing — tamper detection | 10 pts |
| TLS certificate | Validates HTTPS is correctly provisioned | 20 pts |
| WHOIS integrity | Flags imminent expiry or missing transfer lock | 10 pts |
| Subdomain takeover | Detects dangling DNS pointing at unclaimed services | 15 pts |
| MTA-STS / TLSRPT | Enforces TLS on inbound SMTP | 5 pts |
| DNSSEC | Protects against DNS cache poisoning | 5 pts |
Results are cached for 24 hours. Add ?fresh=1 to force a rescan.