What Your Result Will Look Like
Before you enter anything, here is exactly what comes back: a grade, the findings behind it in priority order, and what each one costs you.
- No Login
- No Software
- No Network Access
- Public Records Only
No account, no card, no software. You enter a web address and the result is on screen before you have finished reading this.
The Report You Get
A letter grade, then every finding in plain English with the evidence behind it and what it takes to fix. This is the actual document, filled in with a fictional practice.
- 8
- Categories Checked
- 26
- Checks Performed
- 30 seconds
- Typical Scan Time
- $0
- Always Free
What Happens After You Press Go
You Enter a Web Address
That is all we need. No account, no card, no software.
Eight Categories Run at Once
Email authentication, DNS, certificates, breach exposure, website privacy, lookalike domains, public hosts, and registration.
You Get a Grade Out of 100
Every scan starts at 100. Each confirmed finding takes points off by how much it matters.
Then the Findings, Worst First
Each one says what it means for your business, what the evidence is, and what fixing it involves.
What the Result Will Not Do
It Will Not Guess
A check that could not complete is named as unavailable, never counted as a pass.
It Will Not Certify You
A clean grade means the public checks found nothing. It is not proof of compliance with anything.
It Will Not Show a Password
Where a credential appears in breach data we report the count and the date, never the credential.
Where the Grade Comes From
One letter answers how bad it is. The category breakdown answers where, which is the part anyone fixing it needs.
Common Questions
A fair question, given what usually lands in your inbox about security. The scan is free and there is no account to create. We make money later only if you want us to keep watching, and most people never do.
No. We do not log into anything, test passwords, or touch your network. Every check reads a record that is already published.
Because it was never private. Your email settings live in public DNS. Your certificates are in public transparency logs. Breach data is downloadable. We read it and translate it.
Every finding is confirmed before it appears, and the confirmation rule differs by check. If you still think something is wrong, write to us and we will recheck it at no cost.
Blindspot is not a penetration test. Nothing is logged into, no password is tested, and no network is touched. Every check reads a record that is already public. That limit is deliberate. It is what makes it possible to run this scan for any business, for free, without asking anyone's permission first.
Now See Yours
Thirty seconds, no signup, no access required.
We only read public records. We never touch your computers and we never ask for a password.
Keep Reading
Three places this leads next, depending on what you want to do about it.
- MethodHow the Scan Works, in FullEvery source we read, how a finding is confirmed, how the grade is calculated, and what the scan never does.
- ExampleSee a Complete ReportA full report for a fictional practice: the grade, the findings behind it, the evidence, and the fixes.
- Free ToolFind Out If Your Domain Can Be ForgedCheck whether your domain has a DMARC record and whether its policy blocks forged email. Free business-domain result, with no login or network access.