Domain Security Score
Check a domain in one go: the web connection, mail spoofing defence, domain and DNS, exposed admin screens and reputation. Get a 0-100 score, an A+ to F grade and a short fix list. Free.
Detected
Health Score
Priority Actions most severe first
Score by area
The same domain from another angle: OWASP view → Go-live view →
SSL
HTTP
Mail spoofing defence
RDAP
DNS
Exposure
Reputation
Reference information
DNS Propagation
Port Scan
Reverse DNS
ASN / BGP
Comprehensive Security Lookup
One query answers five questions about a domain: is the connection to visitors protected (TLS certificate and security headers), can others send mail in its name (SPF, DKIM, DMARC — a domain that uses no mail is judged only on whether it is locked against spoofing), could it be lost or cut off (registration and DNS), is something an attacker can use exposed (admin screens, developer tools, directory listings on hosts named in certificate logs), and is it already flagged (DechoNet verdicts, licensed phishing feeds). DNS propagation, reverse DNS, ASN and open ports are shown for reference and not scored.
How It Works
DNS is read first: when only www has an address, the website is measured on www. The other checks then run in parallel, and the certificate is read from our Seoul server. Area weights: SSL (20%), HTTP (15%), Email (20%), RDAP (8%), DNS (12%), Exposure (15%), Reputation (10%). A warning costs a quarter of its area and a critical half. Data that could not be read in full is flagged, not charged; an exposure or reputation lookup that fails is shown as not checked. The top 5 priority actions are drawn from all findings.
FAQ
What does the Health Score mean?
The Health Score (0-100) is a weighted composite of five areas — web connection, mail spoofing defence, domain and DNS, exposure, reputation. 90+ = A+, 80-89 = A, 70-79 = B, 50-69 = C, 40-49 = D, below 40 = F. An A means the basic protections are in place: a site missing HSTS, a CSP and an enforced DMARC policy usually lands in B. The breakdown shows exactly where points are lost.
How often should I run a comprehensive scan?
Run after any infrastructure change (DNS update, certificate renewal, server migration). For ongoing monitoring, a weekly scan catches certificate expirations, DNS misconfigurations, and new blacklist entries before they impact users.
Can I share the results with my team?
Yes — click "Share Link (masked)" to create a shareable URL. Sensitive data (IP addresses, email addresses) is automatically masked before sharing. The link expires after 7 days. You can also copy the full report as Markdown for tickets or documentation.