loading_
Seven honest questions about your own posture. No scanning, no signup to start, just a quick read on where you stand and what to fix first.
⚡ OPTIONAL: REAL LIVE CHECK
Want a genuine (light) read of your public exposure? Enter your domain and we’ll check your email-spoofing posture and how many subdomains are visible in public certificate logs. Real data, from public sources, no signup.
Is multi-factor authentication (MFA) enforced on email for everyone?
Do you have a DMARC policy set to "reject" to stop domain spoofing?
Do you monitor whether staff emails appear in public data breaches?
Do you keep an inventory of all internet-facing systems and subdomains?
Has your team rehearsed a cyber incident in the last 12 months?
Do you verify supplier bank-detail changes by phone, every time?
Do you have a policy on what staff can post publicly (photos, badges, screens)?
0/7 answered. Finish to see your score.