The checks we run at the start of every engagement: can your domain be spoofed in email, is DNS signed, does the website enforce HTTPS and send protective headers, and which certificates have been issued in your name.
Takes 5–15 seconds; we query DNS, your website and certificate transparency logs. Nothing intrusive — only public records and a normal page request.
Built and maintained by the Arventiq Labs team in Bengaluru. Free for anyone, source on GitHub (MIT). Results are indications, not verdicts. Something wrong? Tell us.