Enter your domain and get an instant A–F security grade — no signup, no software to install, no wait. Takes about 15 seconds.
Four fast, non-intrusive checks that tell you where you stand — in plain English, not jargon.
Confirms your site is served over HTTPS and forces secure connections (HSTS). Sites that don't enforce HTTPS leave visitors exposed to eavesdropping and tampering — and it's the kind of gap that stays invisible until someone checks.
Checks that your site tells browsers how to defend it — against clickjacking, content injection and other common attack techniques. Missing headers are a quiet gap most teams never notice.
Verifies your SPF and DMARC records, which stop criminals from sending fake emails that look like they came from your company. This is one of the top tools used in invoice fraud and CEO impersonation scams.
Reviews your domain's DNS setup for common misconfigurations. A tidy DNS record set closes off an easy path attackers use to hijack subdomains or intercept traffic.
This tool is a fast, external snapshot — not a full assessment. Open ports, DKIM validation, deep TLS/cipher analysis and a full attack-surface map are only in the human-reviewed report, checked by a real SafeComs security engineer.
Get the full human-reviewed report →Yes. The free check only reads information your website and DNS already publish to the public internet — the same things a browser or email server checks every day. It does not attempt to log in, exploit anything, or send traffic that could disrupt your site.
We check four categories — TLS/HTTPS, security headers, email spoofing protection (SPF/DMARC), and DNS hygiene — and roll each individual pass, warning or fail into an overall A–F grade. A fail or several warnings in any category will pull the grade down.
The free check is instant and self-serve, covering four external, non-intrusive categories. The full human-reviewed report adds open-port scanning, DKIM validation, deep TLS/cipher analysis and a complete attack-surface map, and every finding is checked by a real SafeComs security engineer before delivery.
We keep a record of the domain, the email you provide and the grade so we can follow up with your full results and prevent abuse of the free tool. We do not sell or share this data, and it is handled under the same privacy standards as the rest of the Cydome platform.