How secure are your domain and email?
Three short steps: we scan your domain (email security, website, data breaches), ask twelve questions about your Microsoft 365 environment and give you a result with advice. Then we call you to plan the deeper scan.
- Step 1: domain scan, result within a minute, only public sources
- Step 2: twelve questions about workspaces, devices, data and security
- Step 3: your result by email, with the advice for your Microsoft 365 environment
- Then: we call within one business day and plan the deeper scan with you
What the scan covers, and what the deeper scan adds
SPF, DKIM and DMARC
Who may send email on behalf of your domain, whether it is signed, and what happens to forged mail. This is the base against CEO fraud and phishing in your name.
Website and certificate
Is your site served securely over HTTPS, is http redirected, and is the certificate valid for a while?
Deeper scan, after the call
With your consent we check the inside: Secure Score, MFA, licences, backup, access rights and device management. You get a report with what is fine, what is not, and what it costs to fix.
Frequently asked
Is the scan really free?
Yes, both the domain scan and the questions, and the call afterwards. The deeper scan is free as well; you only decide afterwards whether you want us to fix anything.
What do you do with my domain name?
We look up public DNS records, request your website once and check the public breach database. We do not store anything unless you request the report.
My score is low. Now what?
Most points are fixed within a day by whoever manages your domain and email. Request the report and we explain exactly what to do, or book a 30-minute call and we go through it together.
Can the scan be wrong?
DKIM is only visible when the key uses a common selector, and the breach check only covers breaches where your domain itself was the leaked service. So a green result is not a guarantee, and a red result is worth checking.