Email security
Checking…Can criminals send email that looks like it came from you?
Free security check for small businesses
How easy is your business to impersonate?
In under a minute, see whether criminals can send email as you, whether your website is properly protected, and whether look-alike domains are already registered — with plain-English fixes.
Passive checks only — we read public DNS records and load your homepage once. Nothing intrusive, no signup. Protected by Cloudflare Turnstile.
…
Scanning
—
Checking email, DNS, website and look-alike domains…
- 0 critical
- 0 to improve
- 0 passed
Fix these first
Website
Checking…Is your site encrypted and hardened against common attacks?
Domain & DNS
Checking…Is the foundation that points people to you resilient and tamper-proof?
Look-alike domains
Checking…Are there registered domains one typo away from yours — a favourite phishing trick?
Results reflect public information at the time of the scan and are not a full security audit. Scanned .
Don't have time to fix it yourself?
Get it fixed — and watched
- Fix-it service: we set up SPF, DKIM and DMARC correctly, harden your website settings and close the gaps in your report.
- Weekly monitoring: we re-scan your domain every week and alert you the moment something changes — or a new look-alike domain appears.
- Plain English: no jargon, no long contracts. Built for small businesses, schools, clinics and non-profits.
What we check
Email authentication
SPF, DKIM and DMARC decide whether a fake “invoice” or “payment change” email using your name lands in your customers' inboxes. We also check encrypted delivery (MTA-STS, TLS-RPT).
Website protection
HTTPS, redirects, HSTS, Content-Security-Policy, clickjacking protection, cookie flags and whether your software versions are on show.
Domain & DNS
DNSSEC, certificate authority restrictions (CAA) and name-server redundancy — the plumbing that keeps your site and email reachable and trustworthy.
Look-alike domains
Typos, swapped letters and other endings (.net, .co, .icu…) that scammers register to impersonate you.
Is it safe and legal to scan any domain?
Yes. Everything we check is public information that any email server or web browser sees every day. We don't probe ports, try passwords or look for vulnerabilities.
Do you store my results?
We keep a simple log of which domains were scanned and their grade so we can improve the service. Contact details are stored only if you fill in the form. See our privacy notice.
My grade is bad. Should I panic?
No — most small businesses we scan have gaps. The “Fix these first” list shows the few changes that matter most, and most take minutes in your email or DNS provider's settings.