Domain Security
Free Domain Security Checks
Passive domain security for UK businesses — by check type, industry, or location. All scans are free, no login required.
Most UK SMEs run on a handful of internet-facing domains and have no visibility into how they appear from the outside. Misconfigured SPF, weak TLS, exposed subdomains, missing security headers — these are the gaps attackers find first, and the gaps Cyber Essentials, GDPR, and supplier due-diligence questionnaires keep asking about.
VP Shield runs the same passive checks an attacker would, with no scan against your infrastructure and no login required. Pick a single check to answer a single question, or run the full attack-surface scan for a written report. The pages below are grouped by how you might come to them: by what you need to verify, by your industry’s regulatory context, by your UK location, or by the business outcome you’re working towards.
Every page is free to use, results are deterministic (same inputs → same output), and your scans are not logged against your identity.
By Check Type
Six individual passive security checks — run any one in isolation or all together.
Free DNS Hygiene Check
Instantly check your domain DNS configuration for dangling CNAMEs, missing CAA records, nameserver consistency issues, and other misconfigurations that expose your organisation to attack.
Check your DNS →Free Email Authentication Check
Check your domain SPF, DKIM, and DMARC configuration in seconds. See whether your domain can currently be spoofed for phishing email and get specific fixes to close the gap.
Check email authentication →Free TLS & SSL Grade Check
Check your domain TLS configuration and get an SSL Labs-equivalent grade. Identifies weak cipher suites, deprecated protocol versions, certificate issues, and missing HSTS.
Check your TLS grade →Free HTTP Security Headers Check
Check your website HTTP security headers — CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy — and get a Mozilla Observatory-equivalent grade with specific recommendations.
Check security headers →Free Subdomain Takeover Risk Check
Detect dangling CNAME records that expose your subdomains to takeover. VP Shield checks your DNS against known vulnerable service fingerprints used in real attacks.
Check for takeover risk →Free External Attack Surface Scan
A complete passive external attack surface scan covering DNS, TLS, email authentication, HTTP headers, subdomain takeover risk, and email spoofing — all in under two minutes, no login required.
Start your free scan →
By Industry
Domain security guidance tailored to UK regulated sectors.
Domain Security for UK Financial Services
FCA-regulated firms face elevated phishing and email fraud risk. VP Shield provides a free passive domain security assessment covering email authentication, TLS grade, and spoofing exposure — no login required.
Scan your firm's domain →Domain Security for UK Law Firms
UK solicitors are prime targets for conveyancing fraud and invoice redirect attacks. VP Shield checks your firm domain email authentication, TLS, and spoofing exposure for free — no login needed.
Scan your firm's domain →Domain Security for UK Healthcare
NHS-connected and private healthcare organisations face strict data protection requirements. VP Shield checks your domain email authentication, TLS configuration, and security headers — free, no login required.
Scan your domain now →Domain Security for UK Property Professionals
Property agents and conveyancers are prime targets for email fraud. Check your domain security posture for free — email authentication, TLS grade, spoofing exposure, and more.
Scan your domain →Free Domain Security for UK Small Businesses
UK SMEs with 5–150 users are disproportionately targeted by domain spoofing and phishing attacks. VP Shield provides a free six-check passive domain security scan — no login, no install, results in under two minutes.
Scan your domain free →
By UK Location
Local IT security support and domain security for UK cities and regions.
Domain Security for London Businesses
Free passive domain security check for London-based organisations. VP Shield checks email authentication, TLS grade, DNS hygiene, and spoofing exposure — no login, results in under two minutes.
Scan your domain →Domain Security for Manchester Businesses
Free passive domain security check for Manchester-based organisations. Check email authentication, TLS grade, DNS hygiene, and phishing exposure — no signup, results in under two minutes.
Scan your domain →Domain Security for Birmingham Businesses
Free domain security check for Birmingham-based organisations. Assess your email authentication, TLS configuration, and phishing exposure without any login or installation.
Scan your domain →Domain Security for Leeds Businesses
Free domain security check for Leeds-based organisations. Check your email authentication, TLS grade, DNS hygiene, and phishing exposure — no login required.
Scan your domain →
By Use Case
Domain security checks for specific business needs — compliance, phishing prevention, and more.
Cyber Essentials Domain Audit
Preparing for Cyber Essentials or Cyber Essentials Plus certification? VP Shield checks the domain security controls that assessors look for — TLS, security headers, DNS hygiene, and more.
Run your pre-assessment scan →Stop Phishing Attacks Using Your Domain
Check whether your domain can currently be used in phishing attacks against your customers and staff. VP Shield assesses your DMARC, SPF, DKIM, and spoofing exposure — free, no login.
Check phishing exposure →GDPR Email Security Check
UK GDPR requires appropriate technical security measures for personal data. Check whether your email infrastructure meets UK GDPR Article 32 requirements — DMARC, DKIM, SPF, and TLS — free.
Run GDPR email check →Domain Security for Remote-First Teams
Remote working expands your attack surface. Check whether your domain email authentication, TLS, and security headers are configured to protect a distributed workforce from phishing and MitM attacks.
Check remote-working security →Domain Security Due Diligence for Suppliers
Check the domain security posture of suppliers, counterparties, or acquisition targets. VP Shield's passive scan reads only public data — no permission needed from the domain owner.
Scan any domain →Continuous Domain Security Monitoring
One-off scans miss changes between assessments. Domain security monitoring tracks your posture over time and alerts you when DNS changes, certificate renewals, or policy downgrades introduce new risks.
Enquire about monitoring →
Need a full security assessment?
VantagePoint Networks provides written domain security assessments, DMARC implementation, and Cyber Essentials preparation for UK businesses.