Enter your domain and we'll instantly check what an attacker sees from the outside — email spoofing protection (SPF, DKIM, DMARC), encryption in transit, and your HTTPS posture. No signup, no software, results in seconds.
We only read publicly available information — your domain's public DNS records (through public DNS resolvers) and the security certificate your website already presents. We never log into, probe, or attack any system. By scanning you confirm this is your own domain or you're authorized to assess it.