Domain security check

Is your domain set up safely?

One check of your email authentication, DNS, registration and web headers, graded A to F, with the exact fix for each problem.

Passive public lookups only (DNS, the registry's RDAP record and your home page's headers). Nothing you type is stored or logged.

Use it from your code

The same check as an API: GET /check?domain= returns the grade, findings and fixes as JSON, POST /diff tells you what changed since your last snapshot (a moved MX or name server is flagged critical), and POST /batch checks several domains at once.

See the API

Daily monitoring (planned)

Get an email when a record changes or a domain is about to expire. Sign-up is not open yet; this form is switched off and collects nothing.