How exposed is
your website?
Enter your domain and I'll check the things attackers check first: HTTPS, your certificate, email fraud protection, security headers and more. Plain-English results, graded, in about a minute.
Passive checks only. I read public information; nothing probes or touches your site.
HTTPS reachability
Can your site be reached securely, and does it load quickly?
SSL certificate
Valid, properly signed, and not about to expire?
Security headers
The six standard protections for your visitors. Most sites are missing them.
Email fraud protection
SPF and DMARC: can a stranger send email pretending to be you?
DNS records
The records that keep your email arriving where it should.
Platform exposure
Is your software version publicly visible to attack tools?
Server information
Is your server advertising details attackers can use?
Standard files
robots.txt and security.txt, the small signs of a well-kept site.
All checks are passive. I only read publicly available information. No port scanning, no brute-forcing, no vulnerability probing.