Free, no obligation

Free Cyber Scan

See what hackers see. We check your website, email security and dark web exposure and send you a branded report. No cost, no obligation.

  • Website and WordPress health
  • Email spoofing protection
  • Dark web exposure

Public information only. Nothing is logged in to, touched or attacked.

Request your scan

What this is

Seeing your business the way a hacker does

Every business leaves a public trail: domain records, mail settings, the website and its software, certificates, open ports, staff email addresses in old breach dumps, the Google listing. Criminals read that trail with free tools before they ever send a phishing email or try a password. We read the same trail for your domain and write down what we see, so you can fix it first.

11security checks
7presence signals
A to Eplain English grade
Glowing glass shield representing cyber protection
PHP flaw detected
DMARC protected
Part one, cyber exposure

What we check on the security side

Email spoofing protection

We read your SPF, DKIM and DMARC records to see whether a criminal could send email that looks like it came from you.

  • SPF, who may send as you
  • DKIM, outbound mail is signed
  • DMARC, spoofed mail is blocked
  • Your email platform

Website and the software behind it

We check the certificate, the platform and the versions your server announces to the world, including this week's critical PHP flaw.

  • HTTPS and certificate
  • WordPress version and extra installs
  • PHP version and known flaws
  • Security headers such as HSTS

Servers, subdomains and open doors

We map every public host name and IP address linked to your domain and look for the soft entry points attackers try first.

  • Open ports on public IPs
  • Exposed remote access
  • Old dev, test and FTP hosts
  • Known vulnerabilities listed

Dark web exposure

We check your staff mailboxes against known breach dumps, so you know whose passwords may already be circulating.

  • Company mailboxes in breaches
  • Which breaches they came from
  • What to reset and protect

Domain hardening

The small DNS settings that stop certificate fraud and mail tampering, plus when your domain is due to expire.

  • CAA and DNSSEC
  • MTA-STS and TLS reporting
  • Registrar and renewal date
Laptop on a desk showing a website analytics dashboard
64/100 Presence score
Part two, digital presence

How customers find and contact you

The same report scores your online presence out of 100, and lists the quick wins that bring in more enquiries: live chat, online booking, advertising pixels, social links and opening hours.

  • Website health Speed, mobile, hygiene
  • Search visibility Titles, schema, sitemap
  • Measurement Analytics, tag manager, pixels
  • Lead capture Forms, chat, booking, tap to call
  • Social presence Profiles linked and live
  • Local signals Address, hours, ABN, map
  • Google Business Profile Listing, reviews, photos, hours
Example of what you get

A clear grade and a fix for every gap

Below is an illustration of the report layout. Your report covers your own domain, prepared and checked by a person.

Cyber exposure snapshot
yourfirm.com.au
D8 of 11 passed
  • Email platform: Microsoft 365 Pass
  • DMARC, blocks spoofed mail Pass
  • Website HTTPS and certificate Pass
  • HSTS not set, browsers not forced onto HTTPS Partial
  • PHP unpatched for this week's critical flaw Exposed
  • Dark web: 2 of 8 mailboxes in breach dumps Exposed
The gaps worth a conversation
  • High
    Urgent patch: PHP version exposed to a critical flaw
    One request can take over the web server, no login needed. Ask your host to update this week.
  • High
    Company mailboxes found in public breach dumps
    Forced password resets, MFA and dark web monitoring close this off.
  • Medium
    Remote access and test hosts visible in public DNS
    Classic soft entry points. Put them behind MFA or remove them.
  • Low
    No CAA record
    A one line DNS fix that stops other providers issuing certificates for your domain.
How to read the grades A Healthy, keep monitoring B Minor tidy up C Gaps a criminal could use D Fix this month E Fix this week, you are an easy target
How it works

From form to report

  1. 01

    Tell us your domain

    Fill in the short form. It takes under a minute and there is no cost or obligation.

  2. 02

    We look from the outside

    Read only, using public sources like DNS, certificate logs and your website. No logins, no passwords tried, nothing attacked.

  3. 03

    A person reviews it

    The scan is automated first, then Peter reads every report before it leaves our office.

  4. 04

    Your report arrives

    A branded report graded A to E, with a plain English fix for every item we find.

Peter Nelson
Peter Nelson
Reviews every report personally

The view from outside. The inside is where the risk lives.

This is a light surface scan. It cannot see your staff laptops, servers, Microsoft 365 tenant, backups, internet connection or phone system. If you already have an IT or web company, ask them when they last checked these items. Often the honest answer is never.

Once your report arrives, a free 30 minute Clarity Call walks you through it and answers the awkward questions. No sales script, no jargon.

Fix it before they find it.

Most small firm breaches start with something on this list. Every gap is fixable, most in days.

Get my free scan Call 1300 477 814