Sender protection
Whether SPF, DKIM and DMARC are set up so that nobody can send email in your name that reaches the recipient.
Free domain check
Can someone send email in your name?
Check it yourself.
The check reads what is publicly available about your domain and translates it into what it means for your company. You see the result straight away, without signing up.
Public data only. No port scan, no login attempt, no change to your systems.
What is checked
- Find the mail servers Shows who handles your email.
- Check sender protection Decides whether someone can forge email in your name.
- Check encryption and DNS Decides whether email can be read in transit.
- Check the website Shows what your website gives away about itself.
Your result
Overall score
– out of 100
Not all areas could be checked. The score refers to what could be evaluated.
What this means for your company
Measures and technical findings
Get the full report by email
For every point: what to do, how much effort it takes and what comes first. Plus all check items in detail, to pass on to your IT.
No email arrived? Please also check your spam folder.
The tip of the iceberg
Your domain is the visible part.Most of it lies below.
The domain check sees what anyone can query from outside. It does not see whether admin accounts are kept separate, whether your backups survive an attack or whether remote access asks for a second factor. These are the systems an attack runs through once it is inside.
If even the outside has gaps, a look below is all the more worthwhile. That is what the IT security check does: three days on site with you, without disrupting your operations.
Below: not checked yet.
What is checked
What anyone can find out about your domain
Attackers look at these settings before they send fake invoices or payment requests in your name. The check shows you the same picture.
Encryption and DNS
Whether email between servers has to be sent encrypted (MTA-STS, DANE) and whether your DNS zone is signed.
Website
Whether your website can only be reached over an encrypted connection, sets the usual security headers and gives away no software versions.
The domain check is not a penetration test. It only sees what is publicly visible from outside, not your servers, workstations or backups.
The domain check shows the outside.
The IT security check shows the rest.
Three days on site with you, from the network through servers and workstations to backups. At a fixed price, without disrupting your operations.
Let's talk about your IT security
In the introductory call (30 minutes, no obligation) we clarify:
- where your company stands today and what concerns you most
- which next step makes sense for your organisation
- what effort and price range to expect
Bastian Wenske
Founder & Managing Director
Prefer to reach out directly? Send us an email at [email protected].
Book an introductory call