Free checks.
Each check looks at one specific threat and uses only public information that anyone can see. We don't send an attack. A good result doesn't mean the whole company is protected.
New PHP vulnerabilities
They allow an attacker to take over a web server. Websites that run on PHP, including every WordPress site.
Always availableEmail spoofing check
Whether anyone can send fake invoices in your domain's name. We read your domain's public settings.
Full security check
When you want to know how well your website or application is protected as a whole. With your written permission.
Can email be forged in your domain's name?
The free check shows whether email can be forged in your domain's name. It doesn't check your website. See what a full report looks like ↗
Scanning email security…
- Rejecting forged email (DMARC)Missing
- List of allowed senders (SPF)Present
- Email digital stamp (DKIM)Found
- Mail servers (MX)2 mail servers
- MTA-STS security policy (MTA-STS)Not configured
- Brand logo in emails (BIMI)Not configured
- DANE/TLSA crypto verification (DANE)Not configured
- Website and its softwareNot checked
- Webshop and customer accountsNot checked
- Applications and serversNot checked
Fake invoices can be sent in your name
Your domain has no DMARC rule that blocks other people's email sent in your name. A fraudster's email to your client looks like a real invoice.
- What can happen
- A client pays the invoice into the fraudster's account
- Fix
- About an hour of your IT partner's time