Website & email security,
explained in plain English.
We continuously check your website, domain and email settings for the misconfigurations attackers love — then tell you exactly what to fix first. Built for small businesses without an IT team.
- No software to install
- No passwords required
- Cancel anytime
Security score
78
+12 this month
Open findings
6
2 need attention
Next scan
Mon
weekly · 3 assets
No DMARC record
acme-bakery.com
HSTS header missing
shop.acme-bakery.com
TLS certificate expires in 21 days
acme-bakery.com
Server version disclosed
shop.acme-bakery.com
Plain-English summary: Someone could send emails pretending to be you. Adding a DMARC record (a 5-minute DNS change) is the top priority this month.
Email impersonation
is one of the most common ways small businesses get defrauded — and SPF/DMARC are free to set up.
Expired certificates
make browsers show full-page warnings. Customers leave before they ever see your site.
Small configuration gaps
are what automated attackers scan the internet for, every day.
How it works
Set up in 10 minutes. Safe by design.
Add your website or domain
Tell us what to watch. No software to install, no passwords needed.
Prove you own it
Add a DNS record or upload a small file, then sign a short scan authorization.
We check it on a schedule
Safe, passive checks of certificates, security headers and email settings.
A human reviews, you get answers
AI drafts a plain-language report; an analyst confirms anything serious before you see it.
Features
Everything a small business needs. Nothing it doesn't.
Real scanners collect the evidence. AI makes it readable. People make sure it's right.
Certificate & HTTPS monitoring
Expiry warnings at 30 and 7 days, chain problems, outdated TLS versions, missing HTTPS redirects.
Email spoofing protection
SPF, DMARC and DKIM checks so criminals can't easily send invoices that look like they came from you.
Security header analysis
HSTS, CSP, clickjacking, cookie flags and more — explained, with copy-paste fixes.
AI-assisted, evidence-backed reports
Every statement ties to real scanner evidence. No invented CVEs, no scare tactics.
Human review
High-severity and uncertain findings are reviewed by a person before you're alerted.
Change alerts
Get an email when something new and important appears — not a weekly wall of noise.
Branded monthly PDF reports
Scope, findings, progress since last month, methodology and limitations. Board-ready.
Step-by-step fix guides
Every finding explains exactly what to change, with copy-paste settings you or your web developer can apply.
No surprises
What we do — and what we don't.
Security vendors love to over-promise. We'd rather be clear, so you can make good decisions.
We do
- • Scheduled passive configuration checks
- • Plain-language reports & priorities
- • Human review of serious findings
- • Alerts when important things change
- • Step-by-step fix instructions
We don't
- • Promise you're “100% secure”
- • Offer 24/7 incident response
- • Scan anything without permission
- • Ask for your admin passwords
- • Let AI change your systems
Can someone send email pretending to be you?
Check your domain's SPF, DMARC and DKIM in seconds. Free, no sign-up — we only read public DNS records.
Pricing
Simple monthly plans
Introductory pricing. Every plan starts with a 14-day free trial — no card required. Only need email protection? Start at $39/month.
Email Protection
Stop criminals sending email as you.
$39/month
Start 14-day free trial- Up to 2 email domains
- Weekly SPF, DMARC & DKIM checks
- DNS health checks
- Alerts when records break or change
- Monthly plain-English report
- Business-hours email support
- Website & certificate checks
Basic Monitoring
Know when something changes.
$99/month
Start 14-day free trial- Up to 3 websites/domains
- Weekly passive checks
- TLS certificate expiry alerts
- SPF, DMARC & DKIM monitoring
- Monthly human-reviewed report
- Email alerts on significant changes
- Business-hours email support
- Weekly analyst review
- Monthly consultation
Business Security
Guidance and tracking until it's fixed.
$249/month
Start 14-day free trial- Up to 10 websites/domains
- Daily passive checks
- Everything in Basic
- Weekly analyst review of findings
- Fix guidance & progress tracking
- 30-min monthly consultation
Need a one-time look? A standalone security assessment starts at $199–$399 depending on scope. Ask us.
Frequently asked questions
No. Our plans run passive configuration checks — the kind of requests any browser or mail server makes. They catch common, high-impact misconfigurations, but a clean result does not prove your site is secure. If you need a penetration test, we'll tell you honestly and point you to a specialist.
Not sure where to start?
Tell us about your business and we'll send a free sample report based on your public email records, plus a 15-minute call if you'd like one.
- Answer within one business day
- No pushy sales
- Real person, not a bot