cqwerty
surface scan000%scanning
The watcher for your domain

Is your domainsecure?

One free scan runs 35 checks across six surfaces - DNS, email auth, TLS, headers, exposed paths, WHOIS - and hands you the exact fix for each. Then the watch begins.

No signup Report in about 90 seconds Read only
01 the surface

EXPOSED.

Right now, your domain answers to anyone who asks. Six surfaces, readable from anywhere:

  1. 01DNS12 records public
  2. 02EMAIL AUTHspf · dkim · dmarc
  3. 03TLScerts & ciphers
  4. 04HEADERS7 checks
  5. 05EXPOSED PATHS.git · .env · backups
  6. 06WHOISexpiry & privacy

Attackers read all of it, every day. When did you last read yours?

02 the scan

35 checks.
One pass.

Ninety seconds, read-only, no account. Every surface mapped, graded and ranked by real risk - in language humans actually read.

0weak spots found3 critical · graded C+
03 the repair

Find.

Every weak spot named, explained and ranked by real risk - no jargon, no 40-page PDF.

Highfinding 07 / 14 · email auth

Your DMARC policy is “none”

Anyone can send mail as billing@yourdomain.com - and your customers’ inboxes would trust it.

Fix.

Each finding ships with the exact record, header or config to paste. No consultant required.

The fixcopy & paste · dns txt record
_dmarc.yourdomain.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"

Add it at your DNS host. Propagates in minutes.

Verify.

Re-scan, watch the finding lock, watch your grade climb. Proof, not promises.

Re-scan41 seconds later
dmarc ............ p=quarantine · ✓ PASS finding 07 ....... resolved · grade C+ → B
04 the watch

Then we never
look away.

Records drift, certs expire, paths appear. cqwerty re-checks your domain around the clock and flags the moment anything moves.

05 the verdict

Your domain.secure.

grade C+ → A · 14 of 14 resolved · the watch is on

Ninety seconds from now, you’ll know. The watch begins with one scan.

No signup Report in about 90 seconds Read only
See a sample report →