Exactly how your score
is calculated
No black boxes. No proprietary algorithms. Every point is earned (or lost) by a specific, named security control — and we tell you exactly which ones to fix.
100 points. 4 categories.
Each category contributes up to 25 points. Within each category, individual checks are weighted by severity. All checks in a category are scaled to a 25-point ceiling — so a strong category partially offsets a weak one.
This design means you can't achieve a high score by acing one category and ignoring the rest. Security requires breadth.
What we check in each category
We don't publish individual tool names — but here's exactly what each category examines.
Encryption & SSL
Max 25 pointsWhy it matters: An expired or misconfigured certificate breaks HTTPS for every visitor — and signals to attackers that your security hygiene is poor.
DNS & Email Security
Max 25 pointsWhy it matters: Without proper SPF, DKIM, and DMARC, anyone can send email from your domain — phishing your customers, employees, and partners.
Web Application
Max 25 pointsWhy it matters: Missing security headers are the easiest wins for attackers — they're trivial to fix and trivial to exploit if left unset.
Infrastructure
Max 25 pointsWhy it matters: An open Redis or MongoDB port accessible from the internet is a critical misconfiguration that takes minutes to exploit and months to recover from.
The grade scale
Grades are intentionally strict. Most production domains land between B and D — that's normal and fixable.
Manual scans
Trigger a scan any time from your dashboard. Results arrive in under 90 seconds.
Weekly automated scans
Pro plan domains are automatically re-scanned every week so you never miss a regression.
Continuous monitoring
SSL expiry, blacklist status, and typosquatting are monitored between scans with real-time alerts.
See your score for real
Free scan. No credit card. Your security grade in 90 seconds.
Scan Your Domain