Passive external scan
How exposed is your domain?
A passive external security check. No login, no install, no port scans — just what an attacker can already see.
Built by VantagePoint Networks · 25+ years in network engineering · 7 domains scanned
What we check
DNS hygiene
SPF, DKIM, DMARC records
HTTP security headers
HSTS, CSP, X-Frame-Options
TLS configuration
SSL Labs grade, cert expiry
Mozilla HTTP Observatory
Grade and failing tests
Subdomain takeover risk
Dangling CNAMEs on common subdomains
Email spoofing protection
Can attackers send mail as you?