Security Check
Free External Attack Surface Scan
A complete passive external attack surface scan covering DNS, TLS, email authentication, HTTP headers, subdomain takeover risk, and email spoofing — all in under two minutes, no login required.
Start your free scan →What's Checked
- Six-check passive domain security scan
- DNS hygiene analysis
- TLS/SSL grade assessment
- Email authentication review (SPF/DKIM/DMARC)
- HTTP security headers check
- Subdomain takeover risk detection
- Email spoofing exposure rating
- Downloadable PDF report
Common Questions
- What is an external attack surface scan?
- An external attack surface scan examines what an attacker can see about your organisation from the public internet — DNS records, TLS certificates, email policies, web server headers, and subdomain configuration. VP Shield performs this passively, reading only public data, without touching your servers.
- Is VP Shield free?
- Yes. The six-check passive domain scan is completely free — no login, no credit card, no installation. Enter a domain and get results in under two minutes. For organisations that need a full written report, continuous monitoring, or expert remediation support, VantagePoint Networks provides paid services.
- What does passive mean for a security scan?
- A passive scan reads only publicly available information — DNS records, published certificates, policy records in DNS, publicly returned HTTP headers. No traffic reaches your server. No firewall logs are created. No alerts are triggered. It is the safest way to understand your internet-facing posture.
Run a free domain security scan
VP Shield checks DNS, TLS, email authentication, security headers, and subdomain takeover risk for any domain. Free, no login, two minutes.
Related Services
Free DNS Hygiene Check
Instantly check your domain DNS configuration for dangling CNAMEs, missing CAA records, nameserver consistency issues, and other misconfigurations that expose your organisation to attack.
Check your DNS →Free Email Authentication Check
Check your domain SPF, DKIM, and DMARC configuration in seconds. See whether your domain can currently be spoofed for phishing email and get specific fixes to close the gap.
Check email authentication →Free TLS & SSL Grade Check
Check your domain TLS configuration and get an SSL Labs-equivalent grade. Identifies weak cipher suites, deprecated protocol versions, certificate issues, and missing HSTS.
Check your TLS grade →