Is your domain secure?
Find out in about 90 seconds. We scan your DNS, email, TLS, headers and leaked data, then hand you a graded report with the exact fix for each issue.
The scan resolves into one graded report.
A clear grade up top, then every category scored and ranked by real attacker impact, each with the exact fix. The same report each scan returns, live and emerald.
- One honest gradeA single A to F verdict from five weighted categories. The formula is published, not a black box.
- Ranked by impactCritical first, never a flat checklist. You fix what actually matters.
- A one line fix on eachCopy-ready. Tighten DMARC, renew the cert, add the header, re-scan.
Every grade is a place on one line. We move you up it.
Your first scan plants a flag somewhere on this scale. Each fix you ship moves the grade, and the color, toward strong.
Anyone can spoof your email, the cert is lapsing, headers are missing. An attacker walks in.
A few real holes left. Spoofable mail or an expiring cert is still an open door.
The basics are there but the edges leak. Medium issues stack up into real risk.
Well covered with small things to tighten. One or two headers from airtight.
Locked down across every surface. Re-scan any time to keep it that way.
Six tools in one scan.
SSL Labs, Observatory, securityheaders.com, and MXToolbox each cover one slice. cqwerty covers all of them, adds exposed-file and WHOIS checks, then tells you exactly what to fix.
| SSL Labs | Observatory | securityheaders | MXToolbox | cqwerty | |
|---|---|---|---|---|---|
| TLS and certificate grading | |||||
| HTTP security headers | |||||
| Email auth (DMARC, SPF, DKIM) | |||||
| DNS configuration check | |||||
| Exposed file and blocklist detection | |||||
| WHOIS and domain expiry | |||||
| Plain-English fix for each finding |
Free to find out. Built to keep you there.
See what an attacker checks first
DNS, email, TLS, headers, exposed files and spam blocklists, swept in one read-only pass from your domain outward.
Fix it without the jargon
No CVE soup. Each finding reads like a teammate explaining it, with the exact copy-ready change to make next.
We keep watching, once a week
Save your domain and we rescan it automatically every Monday. You get a plain-English email only when something changed; quiet weeks stay quiet, and the full grade history is always there.
Every check we run on your domain.
One pass walks your whole surface: encryption, email and DNS, browser headers, exposed files, registration and reputation. Watch the scanner work each category in turn.
Encryption & certificate
A teammate who reads the report for you.
Ask what to fix first and Scout ranks it by real impact and hands you the exact change to make. Everything it says is grounded in your report's real values: it explains findings, it never invents them.
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.comThe numbers behind every scan.
No fabricated logos or testimonials. Just what one free scan covers, every time.
So, is your domain secure?
Run a free scan and find out in about 90 seconds. No account, read only. Your domain stays yours.