Choose your domain
Try the limited free baseline, or purchase a snapshot credit. Only assess a domain you have permission to manage.
Built for MSPs & client-facing teams
A clearer picture of your client’s public-facing security.
Turn public DNS, HTTP and TLS observations into a dated report you can explain. One domain. Private history. A downloadable PDF.
Self-serve. No call or demo. No subscription.
Dated evidenceExplicit coverage limitsDomains you manage with permission
~/cyberscore — example.invalid · illustration
Animated illustration, not a live scan or a command-line feature. The snapshot records observations, evidence and limits — not a score.
Product tour
See it in action
Interface preview. Fictional examples. Click a tab to explore the current snapshot: observations, evidence and limits, PDF and history.
External snapshot
example.invalid · fictional domain
Dated observations, not a security score
DNS / email
SPF policy
Illustrative TXT record: v=spf1 -all
HTTP
Strict-Transport-Security
An observation to review, not a claim of compromise.
TLS
Certificate verification
Unavailable is not healthy, insecure or a score penalty.
Evidence you can read
Reports record when the observations were collected, the public records or response inspected, and the measurement method.
Fictional example: SPF TXT record → observation → recorded evidence
Limits you can explain
Missing coverage stays visible. A timeout does not prove a security issue. A historical certificate-log name does not prove that an asset belongs to the client today.
No composite score. No certification.
A private PDF
Download the report from your account to support a client review. Keep scope, evidence and unavailable measurements in the conversation.
Dated history
Retain a dated record in your private dashboard. Another observation requires another snapshot credit; this is not scheduled monitoring.
Fictional examples illustrating the current scope, not a live report or an exact dashboard screenshot. No scan is performed by this preview.
No meeting required
From a domain to a client conversation.
Review the observations
Run the snapshot from your account. Inspect public DNS, TLS and HTTP observations, their evidence and any unavailable measurements.
Use the report
Download the PDF and retain the dated record. Decide what to verify next with your team or discuss with the client.
A practical outside-in view
Make client reviews more concrete.
An external snapshot is a starting point for discussion, not a verdict on the client’s entire security programme.
Before a client review
Bring dated observations rather than a general conversation about risk. Make the public configuration and the limits of your view visible.
After maintenance
If you purchase another snapshot, review the newly recorded configuration alongside previous dated reports. An observation alone does not prove a fix.
When questions go beyond the domain
Separate public observations from controls that need internal evidence. MFA, EDR and tested backups cannot be proven by this snapshot.
Start small. Know the scope.
Try a baseline. Keep a snapshot.
The paid offer adds a private report and a record you can retain. It is not a deeper pentest or an assurance certificate.
Free baseline
$0
Limited public result · one execution per IP
- Bounded public observations
- Evidence and coverage limits
- No account or card required
- No private report history or downloadable PDF
External security snapshot
One-time purchase$49USD once
One report credit · one domain · no subscription
- Dated DNS, HTTP and TLS observations
- Historical certificate-log names when available
- Private dashboard and dated history
- Downloadable PDF with evidence and limits
Coverage can be partial. A completed report can consume a credit even if some measurements were unavailable. A failed report-generation job does not consume your credit.
Not included: composite scoring, AI Brief, ports or CVEs, scheduled monitoring, internal-control checks, certification or insurance eligibility advice. Previous full-audit and subscription offers remain closed.
Before you start
Straight answers.
What does the snapshot check?
Known public DNS records, SPF and DMARC policies, the TLS certificate, and bounded HTTP response and header observations. Historical certificate-log names may be included when that source is available. DKIM selectors, ports, CVEs and internal systems are not scanned.
How is it different from the free baseline?
The free baseline shows a limited public result and is limited to one execution per IP. The $49 snapshot adds a report for one domain, private dated history and a downloadable PDF. Neither is a complete security audit.
Is this a subscription?
No. $49 buys one report credit for one domain. There is no scheduled monitoring or automatic renewal. A later snapshot requires another credit.
What happens if a measurement is unavailable?
Coverage and limits are shown explicitly. A blocked or timed-out read is not evidence of a weakness or a healthy configuration. A completed report with partial coverage can consume a credit; a failed report-generation job does not.
Can I use it for a client domain?
Yes, if you have permission to assess that domain. Use the dated observations and PDF to support a client discussion. The product does not make changes to client systems.
Does it answer cyber-insurance questionnaires?
No. It cannot prove internal controls such as MFA, EDR or backup testing. It does not certify compliance, determine insurance eligibility or collect an insurance evidence dossier.
Give your next client review a clearer starting point.
A dated external view. An honest account of what was measured. A report you can explain.