How it works
Three steps, and you know where you stand.
Add your domain
The address of your website and email, like yourbusiness.com.
Prove it's yours
Add one DNS record or upload one small file. We never check a domain until this is done.
Get your grade
A to F, each problem explained in plain English, and the fixes in order of what matters most.
The Attack Map
See how the problems connect.
Every report comes with a picture of how the problems link up, so you can see which single fix closes the most doors.
What you get
Five things attackers look for, checked every week.
-
Email spoofingCan someone send email that looks like it's from you?
-
Forgotten subdomainsOld addresses pointing at services you no longer use.
-
HTTPSCertificates and settings, including ones about to expire.
-
Website protectionsThe browser security settings your site sends, or doesn't.
-
Exposed servicesRemote desktop, databases and file sharing, on servers you tell us are yours.
promise
What we never do
- Check a domain before its owner has proved they control it
- Try to break in: no password guessing, no attack code
- Touch private or internal networks
Look after several businesses? IT providers and agencies get every client in one dashboard, with reports under their own name.
Every week
We keep checking, so you don't have to.
Your domain is re-checked every week. If something gets worse, like a certificate about to expire or a new problem appearing, you get a short email saying what changed and what to do.
- From
- WeeklyShield
- Subject
- WeeklyShield: yourbusiness.com needs attention
Your grade went from B to C since last week.
New: your HTTPS certificate expires in 9 days.
An example of the alert email.
Be one of the first.
We're letting businesses in a few at a time. Tell us about yours and we'll email you when there's a place.
Request an invite