SecuryBlackWhat does your server look like from the internet?
Type your domain and we return everything a stranger can find out without touching anything: certificate, DNS, headers, email and exposure. With a score and what to fix first.
What we will check
SSL/TLS certificate
Issuer, validity, days until expiry, signature algorithm, full chain and whether the certificate actually covers the domain you asked about. An expired certificate takes your whole site down without warning.
DNS records
A, AAAA, MX, NS, TXT, SOA and CAA. With no CAA record, any certificate authority can issue a certificate for your domain.
HTTP security headers
HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy. Also whether your server announces its exact version, which is half an hour of work handed to anyone hunting for an exploit.
Email security
SPF, DMARC and DKIM. Without DMARC, anyone can send email pretending to be your domain, and your customers have no way to tell.
IP, hosting and CDN
Reverse DNS, autonomous system and provider. If you have a CDN in front, we say so: what is visible from outside is the CDN, not your server.
Domain and expiry
Registrar, registration date, expiry date and protection statuses. An expired domain takes down web and email at the same time.
This is only what shows from the outside
An external scan sees the façade. It cannot see whether your SSH accepts passwords, whether you have SUID binaries that should not be there, whether you are missing security patches, or whether someone left a world-writable file behind. That only shows from the inside — which is what the agent is for.