Domain Security
See every security improvement or regression at a glance.
Validate your SSL certificate, TLS version, HSTS enforcement, and mixed content.
Check security headers that protect against XSS, clickjacking, and session hijacking.
Detect web application firewalls and server version exposure.
Verify DNSSEC implementation and nameserver configuration for domain integrity.
Check DMARC and DKIM records to prevent email spoofing and phishing attacks.
1-minute checks from multiple locations with response time tracking.
Get instant access to security experts who can help you interpret findings, fix issues, and optimize your configuration.
Chat With Security ExpertsAvailable with Pro and Enterprise plans
One scanner. 50+ security controls. Evidence for your auditors automatically collected.
Schedule daily, weekly, or monthly scans with change detection and real-time notifications for security configuration changes and certificate expiration.
PDF & JIRA integration with automated evidence collection for 50+ controls across multiple frameworks - reduce audit preparation time by 70%.
HITRUST CSF, SOC 2, ISO 27001, NIST CSF 2.0, PCI DSS, and NIST 800-53
Choose a plan that works for you.
For personal use
For small teams
For growing teams
For large teams
Here are some of our most frequently asked questions. If you have a question that isn't answered here, please feel free to contact us.
Get detailed help from our security experts. Account required.
Create Support TicketPremium members: Look for the chat widget in the bottom right corner when logged in.
Our security scanner performs comprehensive checks on SSL/TLS configuration, HTTP security headers, cookie security, mixed content detection, WAF protection, server information disclosure, DNSSEC implementation, nameserver configuration, and email authentication protocols (DMARC/DKIM). Learn more about each security check to understand what we test and why it matters for your website's protection.