Frequently Asked Questions

Anonymous users can validate 5 domains per day. Create a free account to increase this to 20 domains per day.

Anonymous validation results expire after 1 hour. Authenticated users can access their results for 7 days.

Captcha verification is required after 3 anonymous validations in a day to prevent abuse.

114 checks, grouped into 14 standards: RPKI, DNSSEC, DANE, CAA, DNS hygiene, SPF/DKIM/DMARC, MTA-STS, BIMI, SMTP posture, web security (TLS and headers), attack surface, IPv6, registration (RDAP) and security.txt. Each check reports its result as findings in the report (one per mail server or host where that matters), and findings map to requirements in 11 frameworks, including BSI IT-Grundschutz, NIS2 and ISO 27001.

A passive scan runs 87 of the 114 checks. It reads only what the domain publishes: DNS records, certificates, web responses and registry data. The other 27 checks are active: they connect to your mail and DNS servers and test how they behave, for example whether the mail server is an open relay, whether nameservers allow zone transfers or answer recursive queries, and whether IPv6 endpoints are really reachable. Anonymous scans and free accounts are passive. Standard and Premium plans run active scans. Probes of mail client ports (587, 465, 143, 993, 995) also require you to verify that you own the domain. Checks a scan was not allowed to run appear in the report under Not tested, never as passed or failed.

Anonymous validations are automatically deleted after 1 hour.