See what an attacker can already see
Most attacks on small businesses start with information that's already public: a leaked password, an email domain anyone can impersonate, a forgotten system left open to the internet. We check yours for free, using nothing but your domain name.
- Free, no obligation
- Nothing to install
- Results within one working day
What we check
Four checks, each marked red, amber or green on a one-page scorecard.
Leaked staff passwords
We search breach databases and dark web sources for email addresses at your domain, and show which ones have been exposed and when.
Email impersonation
We check your SPF, DKIM and DMARC records, which decide whether criminals can send convincing emails that appear to come from you.
What you show the internet
Using public sources only, we look for subdomains, open services and out-of-date software that anyone scanning the internet can see.
Microsoft 365 sign-in
We ask whether every account has multi-factor authentication. It's the single biggest protection against account takeover, and the one most often missing.
How we handle your information
We only look at public information and never try to access your systems. The scorecard is sent only to an email address at the domain we checked. Exposed passwords are partly hidden in the report. We don't add you to a mailing list.
Request your free check
Use your work email address. The results go to that address only.
Questions
Is it really free?
Yes. There's no charge and no obligation. Most businesses we check have at least one thing worth fixing, and we'll tell you what it is whether or not you become a customer.
Do you need access to our systems?
No. We only look at information that is already public: breach databases, your domain's email records and what your business shows to the internet. We don't log in to anything or install anything.
Who sees the results?
Only you. The report goes to an email address at the domain we checked, which also confirms you work there. Leaked passwords are partly hidden in the report, so it can't be used against you.
How long does it take?
About 15 minutes of our time. You'll usually have your scorecard within one working day.
Will you try to sell me something?
We'll offer to talk you through the results. If what we find is something we can fix, we'll say so and give you a price. If it isn't, we'll say that too.