Evaluates publicly visible DNS/HTTPS signals close to the BSI guidelines. Not a formal compliance proof.
SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DANE, DNSSEC, MX, CAA, reverse DNS, blacklist, IPv6 and BIMI.
Parallel DNS lookups deliver score, grade and traffic light before your coffee gets cold.
Surfaces misconfigurations that attackers exploit for domain impersonation and phishing.
For every check: what is set, what is missing and concrete steps to remediate.
No sign-up, no tracking cookies. Based entirely on publicly available DNS records.