Responsible use

What our checks do

• Look up public DNS records through public DNS resolvers.
• Open ordinary TLS connections to your domain and www to read the certificate.
• Request your home page (one request per address, following redirects) and read the response headers.

We never guess passwords, scan ports, probe for vulnerabilities, submit forms, or try to bypass any protection. We only connect to public internet addresses and refuse to follow anything that points into a private network.

Limits we apply

• Repeated checks of the same domain within a few minutes reuse the previous results.
• Each domain and each visitor can only start a limited number of checks per hour.
• Government and military domains can't be checked.
• Detailed results are only shown to people who verify they work at, or manage, the organisation.

Opting out

If you'd like us not to check your domain, email hello@example.comand we'll add it to our exclusion list.

Misuse

Using this service to target organisations you have no relationship with, or to support an attack, is not allowed. We may block access and report abuse.