Platform/Website Security Scanning
External Surface

Website Security Scanning & Continuous Monitoring

Monitor your public-facing websites, WordPress/CMS installations, e-commerce checkouts, and DNS/email security records for exploitable weaknesses before attackers weaponise them.

Business Outcome:Ensure your primary customer touchpoint never leaks data, serves malicious scripts, or allows domain spoofing against your clients.
Check My Business Security Book a 1-to-1 UK Demo
Initial check speed
< 10 seconds
Header & TLS checks
45+ controls
DNS & Email checks
SPF / DKIM / DMARC
Example DetectionMedium
DMARC Policy Set to p=none (Monitoring Only — Spoofing Unblocked)

Attackers can send fraudulent invoices or password reset emails appearing to originate from your company domain.

Verified Remediation Guidance:
; Update _dmarc TXT record in your DNS provider
_dmarc.yourcompany.co.uk. 3600 IN TXT "v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@yourcompany.co.uk; adkim=s; aspf=s"

What Website Security Scanning Detects

Every check is non-destructive, rate-limited, and verified to eliminate false-positive noise.

  • Outdated CMS cores, vulnerable plugins, and exposed configuration backups (.env, wp-config.php.bak)
  • Missing SPF, DKIM, and DMARC enforcement leaving your domain open to invoice and phishing spoofing
  • Subdomain takeover risks from dangling CNAME records pointing to decommissioned cloud services
  • Insecure cookie attributes (missing HttpOnly, Secure, SameSite) on login and checkout flows
  • Third-party JavaScript supply chain changes and unverified script inclusions

How It Works in 3 Steps

01

Enter your primary domain

Start immediately with passive DNS, TLS, and HTTP security header inspection in under 15 seconds.

02

Map public web assets & CMS components

Identify web servers, frameworks, CDN edges, and third-party scripts across your main site and subdomains.

03

Harden headers, TLS, and email authentication

Follow step-by-step guides tailored to Cloudflare, AWS, Nginx, Vercel, and Microsoft 365 DNS.

Read our Responsible Testing & Authorisation Policy
Test Your Domain External Posture Now
Safe Passive DNS, TLS & Header Inspection
Non-intrusive public check • Active scanning requires verified ownership
Or test an instant demonstration profile: