Free domain security check

Find out if your domain can be spoofed, hijacked or lost. Enter a domain and get a health report in about 15 seconds, with the exact fix for every problem found.

What gets checked

• Email authentication: SPF (including nested lookup limits), DKIM key strength, DMARC policy and reporting, MTA-STS, TLS-RPT and BIMI
• DNS records, nameserver redundancy and DNSSEC
• SSL/TLS certificate expiry, trust chain and legacy TLS versions
• HTTPS redirects and security headers (HSTS, CSP, clickjacking protection)
• Registration: registrar, expiry date and transfer lock, via RDAP and WHOIS
• Hosting, open database and admin ports, and spam blocklists
• Subdomain takeover risks and registered lookalike domains

Free, no sign-up, read-only. This page needs JavaScript to run a scan.