Free vendor risk check
Enter any vendor domain and get an A–F security rating in under a minute — built from the same public evidence our platform monitors continuously. See the exact findings behind the score before you commit to anything.
- Results in about 60 seconds
- Non-intrusive: public data only
- Findings listed by severity
Free Security Check
Instant preview · Free account unlocks the full report
What the check looks at
Six evidence categories, each scored and weighted into the overall rating.
TLS and certificate hygiene
Certificate validity, expiry window, protocol versions and cipher strength — graded A to F.
Email authentication
SPF, DKIM and DMARC records and policy strength, the controls that stop domain spoofing.
DNS configuration
Nameserver setup, MX records, DNSSEC and common misconfigurations attackers look for.
Exposed services
Internet-facing ports and services that should not be publicly reachable.
Breach and credential exposure
Known breach disclosures and leaked credentials associated with the domain.
Scored findings
Every signal rolls into a 0–100 risk score with the individual findings listed by severity.
Questions
- Is the vendor risk check really free?
- Yes. Verify a work email address, enter a domain, and you get the score and top findings at no cost. No card, no sales call required.
- What do you need from me?
- A work email address for verification and the domain you want checked. A work email is required for the free check, email sign-up and Google sign-in. Consultants using a personal address can verify a domain they own instead. We do not need access to your systems, network, or vendor data.
- Is the scan intrusive?
- No. Every check uses publicly observable data — DNS records, TLS handshakes, published breach disclosures and internet-wide scan data. Nothing is exploited or authenticated against.
- How long does it take?
- Under a minute for most domains. Results are cached for 24 hours, so repeat checks on the same domain return instantly.
- What happens after the free check?
- You can start a 14-day trial to monitor that domain continuously, add the rest of your vendor portfolio, and get alerted when anything changes.
One domain is a snapshot. Your portfolio needs monitoring.
A free check tells you where a vendor stands today. Continuous monitoring tells you the day it changes — certificate expiries, new breaches, weakened email authentication and newly exposed services, pushed to you as alerts.