Sys-Ki

External security health check

Could someone send email pretending to be your business?

Check your domain's email spoofing protection, website encryption and DNS in about 20 seconds. It reads public records and makes a few ordinary requests to your website. Nothing is scanned or logged in to.

Email

Whether SPF, DKIM and DMARC stop strangers sending mail as you. This is how invoice and banking-detail fraud usually starts.

Website

Whether visitors always reach the encrypted site, the certificate is trusted, and the security headers browsers rely on are set.

Domain

Whether DNS answers are signed, and which certificate authorities are allowed to issue certificates for you.