Domain security compliance, verified in minutes.
Scan any domain against 14 checks across DNS, mail, web and registration, then read every result against BSI IT-Grundschutz and NIS2.
Every check is written against a specific requirement in
Your portfolio
One place for every domain you are responsible for
The dashboard tracks scan history, how much of your daily quota is left, and where each security category stands over the last 30 days. Progress streams in live over a websocket while a scan runs.
- Filter and search scan history, kept for 7 days on a free account
- Standards-coverage bars for email, web and DNS at a glance
- Export any result as HTML, JSON or CSV
One domain, in depth
A report that tells you what to fix, and why it matters
Each scan produces a status card for every check, a point-by-point score breakdown, and a severity-ranked findings list. Switch to the Frameworks tab to see the same results grouped by BSI and NIS2 requirement.
- Findings ranked critical to informational, with the exact control key
- Plain-language explanation of each misconfiguration
- Re-scan to pick up registry data that lands a minute later
Check a whole portfolio in one run
Paste a list or upload a CSV of up to 100 domains. Every domain gets its own full report, ranked side by side on a scoreboard so the weak spots surface first.
Ranked scoreboard
Average, median and per-standard status for every domain in the batch.
CSV in, CSV out
Upload a domain list and export the full batch as one file.
Drill into any domain
Click a row for the same detailed report a single scan produces.
14 checks, grouped by purpose
Every scan runs all of them. Nothing to configure.
DNS and routing
Who is allowed to announce your routes, and whether resolvers can trust the answers they get.
Whether mail claiming to be from you can be forged, and how it is protected in transit.
Domain and disclosure
Registration hygiene and how a security report reaches you.
Web and network
TLS configuration, security headers, exposed subdomains and IPv6 reachability.
Findings trace back to a real requirement
So a result tells you not just what is wrong, but which clause it fails.
Technical, observable checks only. Governance requirements such as incident response and staff training are out of scope.
Every scan feeds a public view of the internet
Anonymised, aggregate, and free to browse. No domain names, no per-domain identifiers.
Adoption, category by category
Adoption rates and score distributions across every standard we check, updated as scans come in.
Open
- 1 ••••••••.dev 100%
- 2 ••••••.net 100%
- 3 ••••••••••.org 100%
Domains that earned a perfect Website, Email or DNS badge across every relevant standard.
View Hall of FameFrom domain to report in three steps
A full scan takes one to three minutes.
Enter a domain
One domain in the form above, or a list of up to 100 on the batch page.
Checks run in parallel
All 14 checks execute at once. Progress streams to the page as each finishes.
Read and export
Score breakdown, ranked findings and framework mapping, exportable as HTML, JSON or CSV.