Close the gaps criminals use to impersonate you
Your own domains, checked every day for the weaknesses that make impersonating you easy. Each gets a grade from A to F, and each issue a plain-English fix.
The daily check is part of Pro and Enterprise. A demo takes 30 minutes, which is enough for us to give you a clear annual price for your domains.
- 5 areas checked on every domain, from email security to exposed files
- 40+ tests in each check
- Daily checks of every domain and subdomain, plus a rescan whenever you want one
- A–F grade for each domain, with a written fix for each finding
A weak set-up makes you easier to impersonate
A fake invoice is far more convincing when it comes from your real address. Your DMARC record tells other mail servers what to do with email that fakes your domain. If it does not say reject, many of them deliver it.
Fixing it is usually a settings change rather than a purchase.
Today
Accounts team
accounts@yourcompany.com
Updated bank details for your next payment
Delivered. Nothing told the mail server it was fake.
After one fix
Accounts team
accounts@yourcompany.com
Updated bank details for your next payment
Rejected. Your domain says this sender isn't you.
Five questions we ask of each of your domains, every day
Attackers use automated tools to look for easy openings, such as email that can be faked or a forgotten subdomain. We put the same five questions to each of your domains and subdomains, every day.
Including subdomains you may have forgotten
We find your subdomains in the public certificate record and check those too.
See every check in detailAfter you fix it, we keep checking
What's open, what's fixed and what came back, as of this morning's check.
- A grade for each domain
- A to F, with a score for each of the five areas underneath.
- A written fix for each issue
- Step by step, for whoever makes the change, such as the exact DNS record to publish.
- Closed by the next check
- Fix something and the next day's check closes it. If it comes back, it reopens.
What to fix
yourcompany.com
- OpenFixed
Email can be forged from your domain
Email security
- OpenFixed
Old subdomain could be claimed
Domain & DNS
- OpenFixed
Certificate expires in 9 days
TLS / SSL
- Reopened
Missing secure-connection setting
Web hardening, came back after a site update
What the scan does on your domains
- What it requests
- DNS lookups, a normal connection to read your certificate, and ordinary page requests, including a short list of commonly exposed files such as .env or backups. Requests are paced so they do not look like an attack to your firewall. Nothing is changed.
- You make the changes
- It tells you what to fix and how, but does not make the change. It reads your published records, not your DMARC reports, so check that your real senders pass before you move to reject.
- It runs on its own
- Once a domain is added, it is checked every day, and you can run a check whenever you want. Results show on your scorecard; they do not raise alerts the way lookalike threats do.
Watch for lookalikes, and take down the ones used against you
Prevention (Layer 5) checks the domains you own. Monitoring (Layers 1 to 4) watches for lookalikes of them that you do not own. When one is used against you, takedown sends the evidence to the companies that can switch it off. One account, one list of domains.
The daily check of your own domains is part of Pro and Enterprise. The free scan does not grade them.
A demo takes 30 minutes, enough for us to give you a clear annual price. The free scan checks 150+ lookalikes of your domain, not your own domain's set-up.