Is your domain secure?

Find out in about 90 seconds. We scan your DNS, email, TLS, headers and leaked data, then hand you a graded report with the exact fix for each issue.

No signup Report in about 90 seconds Read only
yourdomain.comLive demo
Scanning six surfaces
Resolving DNS records
Checking SPF, DKIM, DMARC
Inspecting TLS certificate
Auditing security headers
Probing for exposed files
Querying spam blocklists
Scanning 6 surfacesyourdomain.com
The report

The scan resolves into one graded report.

A clear grade up top, then every category scored and ranked by real attacker impact, each with the exact fix. The same report each scan returns, live and emerald.

  • One honest grade
    A single A to F verdict from five weighted categories. The formula is published, not a black box.
  • Ranked by impact
    Critical first, never a flat checklist. You fix what actually matters.
  • A one line fix on each
    Copy-ready. Tighten DMARC, renew the cert, add the header, re-scan.
cqwerty.com/results
A
Overall grade
Strong posture
10 checks run · 2 to fix · 91/100
Email auth
SPF, DKIM and DMARC enforced
A
TLS
TLS 1.3, valid 268 days
A
DNS
DNSSEC signed, CAA missing
B
Headers
CSP set, HSTS to add
B
From exposed to strong

Every grade is a place on one line. We move you up it.

Your first scan plants a flag somewhere on this scale. Each fix you ship moves the grade, and the color, toward strong.

F
Wide openCritical
D
Serious gapsAt risk
C
ExposedExposed
B
SolidSolid
A
StrongStrong
Why one scan

Six tools in one scan.

SSL Labs, Observatory, securityheaders.com, and MXToolbox each cover one slice. cqwerty covers all of them, adds exposed-file and WHOIS checks, then tells you exactly what to fix.

SSL LabsObservatorysecurityheadersMXToolboxcqwerty
TLS and certificate grading
HTTP security headers
Email auth (DMARC, SPF, DKIM)
DNS configuration check
Exposed file and blocklist detection
WHOIS and domain expiry
Plain-English fix for each finding
What you get

Free to find out. Built to keep you there.

See what an attacker checks first

DNS, email, TLS, headers, exposed files and spam blocklists, swept in one read-only pass from your domain outward.

Fix it without the jargon

No CVE soup. Each finding reads like a teammate explaining it, with the exact copy-ready change to make next.

We keep watching, once a week

Save your domain and we rescan it automatically every Monday. You get a plain-English email only when something changed; quiet weeks stay quiet, and the full grade history is always there.

Live scan

Every check we run on your domain.

One pass walks your whole surface: encryption, email and DNS, browser headers, exposed files, registration and reputation. Watch the scanner work each category in turn.

cqwerty.com
Scanning01/06

Encryption & certificate

TLS · certificate · HTTPS
Certificate valid & trustedPass
Trusted CA cert that matches the domain
TLS protocol 1.2 / 1.3Pass
Modern TLS negotiated, legacy refused
HTTPS redirectPass
Plain http:// is redirected to https://
Expiry & renewal windowReview
Days left before the certificate lapses
Run every check on your domain Free, no signup, read only.
Meet Scout

A teammate who reads the report for you.

Ask what to fix first and Scout ranks it by real impact and hands you the exact change to make. Everything it says is grounded in your report's real values: it explains findings, it never invents them.

ScoutWatching
What should I fix first?
Two things. Move DMARC to quarantine so nobody can spoof your mail, then add the HSTS header. I can show you the exact record for each.
Show me the DMARC change.
The exact DMARC record
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Copy recordWhy this fix
Scan logScanned yourdomain.com · TLS OKnow
Proof, not promises

The numbers behind every scan.

No fabricated logos or testimonials. Just what one free scan covers, every time.

10
checks
6
surfaces
90s
median
$0
signup

So, is your domain secure?

Run a free scan and find out in about 90 seconds. No account, read only. Your domain stays yours.

No signup Report in about 90 seconds Read only