Free scans cover the top 5 categories instantly. Plus and Max add deep CVE analysis and AI code pattern detection.
🔒
SSL / TLS
Certificate validity and expiry, HTTPS availability, HSTS enforcement.
Expiry & auto-renewal
HSTS header
Self-signed / invalid cert
🌐
HTTP Security Headers
Six browser security headers checked: CSP, X-Frame-Options, CORS, MIME type, referrer policy, and server version disclosure.
Content-Security-Policy
X-Frame-Options
Server version leak
📧
Email Security
SPF, DKIM, and DMARC records — the three pillars that stop email spoofing and phishing using your domain.
SPF record
DKIM signing
DMARC policy enforcement
🔍
Open Ports & DNS
Eleven risky ports probed — databases, RDP, Redis, MongoDB, Elasticsearch. DNS also checked for DNSSEC and dangling CNAMEs.
DB ports (MySQL, Postgres, Mongo, Redis)
DNSSEC
Dangling CNAME takeover risk
🦠
Malware & Reputation (VirusTotal)
Your domain is cross-checked against 90+ security vendors via VirusTotal. Malicious flags, suspicious scores, phishing categories, and reputation scores all reported.
Malicious / suspicious vendor flags
Phishing & malware categories
Domain reputation score
🤖
CVE & Code Analysis
PLUS
MAX
Deep vulnerability scanning powered by Shodan CVE database (Plus/Max subscribers). Code file upload scans for 11 critical patterns including AI-generated code flaws.
Shodan CVE database (Plus/Max only)
Hardcoded secrets, SQL injection, JWT
CORS wildcard, debug mode, eval() abuse