What is checked
- Website: whether HTTPS works, days left on the certificate, the http redirect and HSTS, and a security-headers grade.
- Email: MX, SPF (including the 10-lookup limit), DKIM across 19 common selectors, DMARC and its policy, PTR of mail servers, their IPs on blacklists, MTA-STS.
- DNS: number and spread of NS, DNSSEC, CAA, the www host.
- IPv6 for the site, mail and DNS; the domain: expiry, holds and domain blacklists.
How the grade works
We start at 100 and take points off for each problem, most for what breaks mail and the site: missing SPF or DMARC, an expired certificate, broken DNSSEC, a blacklisted IP. Missing IPv6 or MTA-STS costs little. A means 90+ with no critical errors.
Shareable report and alerts
Share saves the report and gives you a short link to send to an admin, a contractor or hosting support. Watch in Telegram connects the bot, which messages you 30, 14, 7, 3 and 1 day before the certificate or registration expires.
Dig deeper: DNS, SPF and DMARC generator, blacklists, SSL, headers, deliverability test.