Free check
See what your domain already tells the internet
Enter the domain your practice sends email from. In under a minute you'll see what a stranger scanning it could already learn: email authentication, DNS hygiene, website security headers, the mail platform behind it, and which trackers the homepage loads.
What this scan covers
This scan reads only what the domain already publishes: DNS records, the homepage’s response headers and public tenant discovery endpoints. It never signs in and it tests nothing that needs permission. Because none of that reaches inside the tenant, treat the result as a starting point, not a verdict.
What it reads
Five public surfaces
- Email authentication. Whether someone can send email that appears to come from this practice.
- Domain and DNS. Whether the domain registration and DNS records are protected against takeover.
- Website security. Whether the website tells browsers to protect the people using it.
- Microsoft 365 and Google Workspace. What the public DNS records reveal about a Microsoft 365 or Google Workspace tenant.
- Privacy and tracking. Which third parties receive data about visitors to the site.
The grade is generated from the published rubric. How the score is calculated.
Run a scan
The registrable domain, for example yourpractice.com.au, not a page within the site.
Need the view from inside the tenant?
A Cyber Health Check covers multi-factor authentication, Conditional Access, mailbox forwarding and backups. Those answers need access. This scan cannot see them.