Free technical audit of your email & domain security.
15+ automated checks covering email authentication, DNS hygiene, public attack surface and known breach exposure. Delivered as a letterhead PDF, usually within one business day.
What we check.
Everything on this list is run automatically against your public DNS and public-facing endpoints. No agents to install, no credentials needed, no touching your internal network.
Email authentication
SPF syntax & lookup count, DKIM selectors found, DMARC policy & alignment, MTA-STS & TLS-RPT presence, BIMI readiness.
DNS hygiene
DNSSEC enablement, CAA records, nameserver configuration, WHOIS registrar lock, expiry date, name registration health.
MX & mail provider
Mail exchangers, identified provider, implicit vs explicit TLS, port reachability, correctness of outbound sender configuration.
Web attack surface
TLS certificate chain & expiry, HTTP to HTTPS redirect enforcement, security headers (HSTS, CSP, X-Frame, Referrer-Policy, Permissions-Policy).
Breach exposure
Any email addresses at your domain found in known Have I Been Pwned breaches, with the breach name, date and type of data exposed.
Subdomain discovery
Public subdomains surfaced via Certificate Transparency logs. A quick view of what else your domain is advertising to the internet.
Multi-domain fan-out
If you own more than one domain (holding company, trading name, legacy domain), add them all and we audit each in parallel.
What you get back.
A letterhead-styled PDF with an executive summary at the top (one page the business owner can read in three minutes), followed by a per-category breakdown with every finding colour-coded. Red findings include the exact DNS or configuration change needed to fix them. We write it in plain English, not security jargon.
If anything looks unusual we may ask one or two clarifying questions before sending the PDF. Otherwise you get it in your inbox, no sales call required.
Request your free audit.
Takes about 30 seconds. We will send the PDF to the email you provide.
Frequently asked questions.
Why is it free?
It is fully automated so running it costs us almost nothing. Businesses that act on the findings and need help remediating often become clients. Businesses that just want to tick a box and move on are welcome to do that too, no obligation.
How long does it take?
The automated checks run in a few minutes. The audit report, including plain English explanations of each finding and recommended fixes, is delivered as a PDF to the email address you provide, usually within one business day.
Will you contact my current IT provider?
No. We never contact anyone else about your business without your explicit permission. The audit uses only public information (DNS records, TLS certificates, HIBP breach lists). We do not scan your internal network.
Is this a sales pitch in disguise?
The pitch is the PDF itself. If the findings make a case for us helping you fix them, great. If they do not, you still get a useful snapshot of your public security posture. We do not run follow-up call sequences unless you ask us to.
What happens to my data after the audit?
We keep the submission and audit results in our internal Help Desk so we can discuss findings with you if you want to. If you ask us to delete it we do so immediately. We do not sell or share your details with anyone.