How easily could someone send emails in your company's name?
Enter your company domain (or email address) and see straight away whether your email and website are protected. Everything explained in plain language, with what needs fixing.
We only check public information (DNS and the website's headers), exactly what any email server sees. We do not test, attack or store anything.
Check your computer too, on all five layers
The scanner above only sees what is public. What is on the computer (disk encryption, admin account, antivirus, backup) can only be checked on the computer itself. It takes less than a minute.
Firewall on, Wi-Fi encrypted, remote desktop (RDP) open or closed.
Windows up to date and supported, antivirus active, disk encrypted (BitLocker), Secure Boot.
Do you work as administrator every day? How many admin accounts exist, the Guest account, UAC.
Does your network block dangerous websites?
OneDrive, File History, restore points.
For what cannot be measured: 3 per layer, one click each, right in the report.
- Tick the box and click Download the app.
- Open the downloaded file. If the browser asks, choose to keep it.
- If the blue “Windows protected your PC” window appears, click More info and then Run anyway. It appears because the file is not yet digitally signed.
- In the app, tick the consent box and click the start button. At the end, the report opens in your browser and is saved on your Desktop.
For Windows 10 and 11. The app does not install and does not need administrator rights. The app's interface and report are in Romanian for now; an English version is on the way, together with the Microsoft Store release. SHA-256 checksum: b3bb6f56087e454e854878e00fd46d2f9aaf3ad024d8c8ff9ff48de1cb98196c
What we check, in short
The list of servers allowed to send email as your company. Like the guest list at the door.
A digital signature on every email, like a seal on an envelope: it shows the message was not opened and changed on the way.
The rule for fake emails: let them through, send them to spam, or reject them. This is where “invoice with a changed bank account” fraud stops.
The website's padlock and the settings that stop the browser from being fooled by fake pages or injected code.
A signature on the internet's “phone book”, and the list of who may issue certificates for you.
We don't send emails, look for passwords or try to get in anywhere. It is a remote check, like reading the sign on a door.
The result is a starting point, not a full audit. For your company, we do the full assessment on all five layers (Network, Devices, Users, Family, Backup) free of charge the first time.