Free tool · External perimeter
Surface security check
A fast, non-intrusive check of a site's external perimeter — DNS and mail authentication, TLS and certificate, security headers, cookies, HTTPS enforcement and the vulnerability-disclosure channel. It reads what is publicly observable; it does not scan ports, fuzz paths or send attack payloads. Run it only against domains you own or are authorised to test.
Start with a safe check
Enter the domain, confirm authorisation and run the surface profile. After the result, the page shows the next available step automatically.
- Domainexample.com without http or paths
- Safe checkDNS, TLS, headers, cookies
- VerificationTXT or file unlocks deeper checks
- Full and activeseparate actions after verification
–
What to improve
Surface check only — it does not replace a full assessment. A certificate is issued only after the applicable check groups pass at the requested level. See the methodology and automated coverage.