Find out whether your website is available, your business email is trusted, your SSL and domain settings are healthy, and exposure needs attention — before customers are affected. Free checkup, no signup required.
Your free checkup includes an eight-dimension health score and actionable findings. Choose ongoing protection when you want alerts for future changes.
What Does This Checkup Protect?
The free Website Security Checkup runs GuardHound's five technical pillars in parallel: availability, certificates, domain intelligence, digital exposure, and risk scoring. Their checks summarize into one eight-dimension health score, so you can see the customer-facing risk and the next fix in under 30 seconds.
-
🔒
Keep your website trusted — Validates your SSL / TLS certificate chain, checks expiry dates, and detects self-signed or misconfigured certificates that can break browser trust.
-
📧
Keep business email trusted — Verifies SPF, DMARC, and DKIM records that help prevent spoofing and phishing attacks.
-
🛡️
Strengthen your DMARC policy — Checks enforcement level (none, quarantine, reject) and alignment settings to protect against email impersonation.
-
🐛
Catch exposure early — Fingerprints your server stack from HTTP headers and checks the National Vulnerability Database and CISA's Known Exploited Vulnerabilities list.
-
🔍
Check breach exposure — Scans XposedOrNot for domain-wide breach exposure (free) and merges Have I Been Pwned on Pro+ for broader coverage.
-
👁️
Spot lookalike domains — Generates typosquat variants and resolves each via DNS to identify active phishing infrastructure targeting your brand.
-
📋
Keep the domain under control — Snapshots your registrar and nameservers, flagging changes that could indicate domain hijacking.
-
🌐
Google Safe Browsing — Checks your domain against Google's malware, phishing, and unwanted software lists.
-
🔗
Subdomain Discovery — Queries Certificate Transparency logs to find subdomains, identifying shadow IT and forgotten services.
Why Check Your Website and Domain?
- Discover issues before customers notice them — expired SSL certificates, missing DMARC records, and known CVEs can interrupt trust and sales.
- Protect your brand reputation — lookalike domains and safe-browsing flags can damage customer trust and get email blocked.
- Stay ahead of sender requirements — since February 2024, Google and Yahoo require all senders to authenticate mail with SPF or DKIM, and bulk senders (5,000+ messages/day to Gmail) to have SPF, DKIM, and a published DMARC record.
- Get actionable remediation guidance — every finding includes a clear explanation of the risk and steps to fix it.
- Keep watch continuously — choose Starter ($29 per domain/month), Pro ($59 per domain/month), Business ($129/month for 50 domains), or the separate Agency path ($249/month for up to 25 client workspaces) to get automated checks and alerts. See all plans →
Explore Our Free Security Tools
Frequently Asked Questions
Is this Website Security Checkup really free?
Yes, completely free. You can check any domain without creating an account or entering a credit card. The checkup watches five technical pillars and gives you an eight-dimension health score plus actionable findings. Choose a protection plan when you want ongoing alerts.
What data do you collect during a scan?
We only collect the domain name you enter and your optional email address. All scan data is gathered from publicly available sources — SSL certificates, DNS records, NVD, Certificate Transparency logs, and breach databases. We never access your server or internal systems.
How is the health score calculated?
Your domain starts at 100 and loses weighted points across
eight dimensions: uptime, certificates, DNS, email authentication, breach exposure, vulnerabilities, brand risk, and hosting reputation. The dimensions summarize five technical pillars: website availability, SSL and certificates, domain intelligence, digital exposure, and risk scoring. Each daily snapshot records the top contributors so you know what dropped your score.
Read the full breakdown →
Can I scan any domain or only ones I own?
You can scan any domain. Our scanner only queries publicly available information — the same data anyone can access. To set up continuous monitoring, you'll need to verify domain ownership via a DNS TXT record.
How long does a scan take?
Most checkups complete in under 30 seconds. We run all five GuardHound technical pillars in parallel to deliver results as fast as possible.
Learn More About Domain Security