Free scan, results in seconds - no account required. Preparing for Cyber Essentials or a cyber insurance renewal? This is exactly what those forms ask about.
SPF, DKIM, DMARC and MX configuration - the controls that stop attackers spoofing your domain.
HTTPS, TLS certificate health, and the security headers browsers rely on.
DNSSEC, CAA, and domain registration status - including expiry, which businesses genuinely lose domains to.
Subdomains and infrastructure that are publicly discoverable through legitimate, passive sources.
Whether your mail servers are currently listed on spam blocklists that could be silently rejecting your email.
The self-assessment questionnaire asks about secure configuration, patching, and what's reachable from outside your network. This scan checks the parts of that visible from the outside before you fill it in. It isn't a Cyber Essentials assessment or certification itself - just a fast way to find what needs fixing first.
Insurers ask about email authentication, certificate management, and public exposure before they'll price or renew a policy. Get the answers to those exact questions in one scan, before the underwriter does.
MSPs and IT consultants: show a prospect exactly what's wrong with their current setup - real findings with evidence, not a generic pitch. It's free to run, so there's nothing to lose by checking before you propose anything.
No account, no sign-up wall - just the domain name. Takes five seconds.
13+ checks across email, website, domain, exposure, and reputation - all from the same public sources anyone (attacker included) could already query.
A score out of 100, exactly what we found, why it actually matters for your business, and how to fix it - plus a downloadable PDF.
Not a jargon dump. Every issue we flag comes with the business risk in plain English, a concrete fix, and the raw evidence behind it - these are real examples from an actual scan (domain replaced with a placeholder).
{
"recordsFound": 0,
"checked": "_dmarc.acmewidgets.co.uk"
}{
"subdomains": [
"admin.acmewidgets.co.uk",
"vpn.acmewidgets.co.uk",
"staging-old.acmewidgets.co.uk"
],
"source": "certificate transparency logs"
}Yes. You get your score out of 100, how many issues we found by severity, and one finding shown in full - no card required. Unlocking the complete report with every finding, the business risk behind each one, and the fix costs a one-off payment.
No. Domain Medic runs automated, passive checks against publicly accessible information - DNS records, response headers, certificate data. It never attempts to log in, exploit anything, or access systems that aren't already public. It complements a penetration test; it isn't a substitute for one.
No. Every check is read-only - the same kind of request a browser makes when it visits your site, or a DNS lookup anyone can run. Nothing is modified, nothing is written to, nothing is submitted.
Typically under 10 seconds. All checks run concurrently rather than one after another.
Every finding that needs attention comes with a plain-English ‘why this matters’ and a concrete ‘how to fix it’ - not just a technical label. See the example below.
It covers the same ground those forms ask about - email authentication, patching signals like TLS certificate health, and what's publicly exposed - so it's a fast way to find out what needs fixing before you fill one in. It isn't a Cyber Essentials assessment or certification itself, and doesn't replace one.
Payment is processed entirely by Stripe - we never see or store your card details. We keep only what's needed to show you your report: the domain scanned and the results. See our Privacy Policy for the full detail.
Only scan domains you own or are explicitly authorised to assess. Every check here only touches publicly available information, but the results can reveal real weaknesses - treat that responsibly.