Tools
Every check, in one place.
14 checks across identity, email, domains, and network. Each one ends in a grade and a short list of fixes. Run them in your browser or in the app.
Username presence
Which well-known sites have an account under your handle, so you can see what one name links together.
Breach exposure
Which known data breaches included your email address, and what was taken.
Infostealer exposure
Whether credentials for your email were captured by info-stealing malware on an infected computer.
GitHub exposure
What your public GitHub account gives away: contact details, commit emails, keys, and telling repo names.
Email posture
Check whether your email domain is protected against spoofing and downgrade.
Email address check
Whether an address delivers, can be spoofed, is disposable, and has a public Gravatar.
DNS records
Inspect the public records that route and verify a domain.
Domain surface scan
Queue a compact review of DNS and public web-response signals.
Security headers
Grade the HTTPS response headers and cookies of a site you run.
Domain registration
Registrar, expiry, locks, DNSSEC, and whether your contact details are public.
Certificates & subdomains
Find every host name that public certificate logs reveal for your domain, and which still resolve.
Archived snapshots
See how far back the Internet Archive has copies of your site, including pages you removed.
Tech stack
Identify the platform, hosting, and third-party scripts a site exposes to visitors.
IP address context
See what an IP address reveals: who owns it, where it sits, and what its reverse DNS says.
No checks match that.
Checks marked Confirmation touch sensitive data and ask you to confirm the identifier is yours or that you are authorized to assess it. See the acceptable use policy.