What it checks
- Email: who hosts your mail, SPF, DKIM, DMARC and MTA-STS
- Website: certificate validity and expiry, HTTPS redirect and HSTS
- Domain: registration expiry, transfer lock, DNSSEC and who hosts your DNS
- Lookalikes: registered domains that could be used to impersonate you
How to read your score
The score runs from 0 to 100, weighted by how much each issue matters. Critical issues, like a domain anyone can send email as, cost the most. Each finding explains what's wrong, why it matters and how to fix it.
Keep it checked
Create a free account to recheck one domain every week and get an email if something changes. Paid plans recheck every domain and add Microsoft 365 or Google Workspace.
Questions
- Is the domain security check really free?
- Yes. There's no signup for a one-off check, and one domain is monitored weekly for free with an account.
- Does the check change anything on my domain?
- No. It only reads public DNS, certificate and registration data, the same information anyone on the internet can see.
See where your company stands
Check a domain for free, then connect Microsoft 365 or Google Workspace for the full checkup. Every new workspace gets a 7-day trial, no card needed.