← All Tools
Free · No account · Instant results

Is Your Website Defenseless?

Attackers can forge emails from your domain, your SSL could be expiring, and your site may be missing critical security headers — right now. Find out in 30 seconds, free.

DNS-based · no data stored All checks run in parallel Plain-English results

Five Layers of Security

Analyzed instantly, explained in plain English

Email Authentication

SPF, DKIM, and DMARC — the trio that stops email spoofing attacks cold.

⚠ Email fraud, BEC scams

SSL / TLS Certificate

Expiry, protocol version, and HTTP redirect — your site's encryption layer.

⚠ Data interception, warnings

Security Headers

6 free browser protections most sites are missing — stops XSS and clickjacking.

⚠ Script injection, clickjacking

Blacklist Status

Check 6 major blocklists to ensure your emails aren't silently blocked.

⚠ Email delivery failure

Technology Stack

Detect your CMS, framework, server, and hosting — know what's running.

⚠ Outdated software, known CVEs

Common Questions

What is DMARC and why does my business need it?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS record that tells receiving mail servers what to do with emails claiming to be from your domain. Without it, anyone can send phishing emails impersonating your business — a technique behind billions in annual fraud losses.
How often should I scan my domain?
Run a scan whenever you change email providers, update DNS records, or add new services. Monthly scans are good practice — SSL certificates expire, and mail server IPs can end up on blocklists without warning.
Can DarkHorse IT fix the issues found?
Yes. Our team specializes in exactly these configurations. Most email authentication issues can be resolved within 24–48 hours. We also offer ongoing monitoring so you're alerted before issues affect your operations.
Is this scan safe? Will it affect my website?
Completely safe. We only read publicly available DNS records and make standard HTTPS requests — the same as any browser visiting your site. We don't store your domain name or any scan data.