Know your external
security posture.

Web & TLS

Certificate validity, security headers (HSTS quality, CSP unsafe-inline detection, Referrer-Policy, Permissions-Policy), WAF/CDN detection, HTTP→HTTPS redirect, and certificate transparency logs with subdomain enumeration

DNS & Email

SPF quality, DMARC enforcement level, DKIM detection, DNSSEC, CAA records, MTA-STS — plus network infrastructure checks for PTR and forward-confirmed reverse DNS, SPF/MX consistency, mail/web IP separation, and provider concentration risk

Threat Intelligence

Ransomware leak sites, Google Safe Browsing, internet exposure & CVEs, lookalike domain detection, URLScan.io, AbuseIPDB, and HIBP breach detection (Pro)

PDF Reports

Download a full security report with findings and remediation advice for sharing with stakeholders