Security audit

Score a domain on email authentication, certificates and DNS security.

Enter a domain or subdomain without https://.
Leave empty to try common selectors automatically.

Email authentication

SPF, DKIM, DMARC and BIMI, including recommended policies.

SSL/TLS and HSTS

Certificate issuer, expiry window and downgrade protection.

DNS and transport

DNSSEC, CAA, MTA-STS and TLS-RPT with suggested improvements.