Free security checks
Can your domain be spoofed or hijacked?
Free checks and plain-English guides for the email and DNS settings small businesses get caught by. Run the instant check, then read how to fix what it finds.
Guides
One check, one guide.
What's free
Instant check, or a free account.
The instant check needs no sign-up. It reads your domain's public DNS records (SPF, DKIM, DMARC, MTA-STS, DNSSEC and CAA), gives you a score and lists what to fix. Nothing is stored and nothing is sent to your servers. You can run five checks a day.
A free Exposure account covers one domain you've verified. It adds website checks such as HTTPS and security headers, step-by-step fix guides, a monthly re-scan and email alerts.
Solo and Business plans add port and vulnerability scans of the hosts you authorise. See Exposure plans and pricing.
See your domain the way attackers do.
Exposure turns every finding into plain-English steps for Microsoft 365, Google Workspace, Cloudflare and more.