Free External Security Scan
See your public-facing exposure the way an attacker does — email authentication, DNS integrity, TLS, HTTP headers, exposed services and blocklist reputation — and get a defensible score with the fixes that matter first.
Every check here is bounded and non-intrusive. We read public signals only: DNS records, Certificate Transparency logs, the target site’s own response headers, and public internet-wide scan data. Nothing is brute-forced, no vulnerability is exploited, and this tool does not port-scan the target — exposed-service data comes from public scan databases that already indexed the host. What the results mean →
Scan only domains you own or are authorized to assess. This is meant for your own business, or for a prospect or client who has asked you to look. Please don’t point it at infrastructure you have no relationship with.
Assessment
—
Security checks
Priority findings
What’s public
Want these fixed?
This scan shows what the internet can see. Our Business Risk Assessment checks the inside too: accounts, email settings, computers, backups and your office network, with a priced plan to close the gaps. $495 flat for up to 10 computers. Email yourself the full report (the checks are re-run and written up for you), and we’ll follow up once a few days later with the fix that matters most. Or book a scoping call now.
Prefer to talk now? Book a scoping call or call 727-579-4335.
What this assessment covers
MX, SPF, DKIM and DMARC, plus MTA-STS and TLS-RPT: the controls that stop your domain being spoofed.
Authoritative DNS, DNSSEC validation and CAA policy — the control plane a takeover starts from.
HTTPS reachability, HTTP-to-HTTPS upgrade and certificate freshness from Certificate Transparency logs.
HSTS, CSP and the anti-sniffing and anti-framing headers browsers rely on.
Public open ports and sensitive services — RDP, databases, admin panels — from public scan data, no port scan by us.
Whether your domain or its IP is on a public blocklist that quietly breaks deliverability and trust.
Why it matters
Attack-surface gaps rarely stay technical. Weak email authentication makes fraudulent invoices look legitimate. A forgotten staging subdomain or an exposed database becomes the way in. An expired certificate or a blocklisted IP costs you customers before you ever hear about it. This scan is the fast first look; when you’re ready to fix and monitor it continuously, that’s what our managed SOC and managed IT do.