Email security
SPF, DKIM, DMARC, MX and related mail-authentication controls.
Browse email security guides →External domain security assessment
Assess the security posture of a domain from the outside.
SecuTest analyzes externally observable security controls across email authentication, DNS, TLS, HTTP, exposed services and reputation. The result is a prioritized view of what an attacker, customer or security reviewer can observe without internal access.
- Public signals only
- Bounded, non-intrusive checks
- No agent or credentials required
Explore by control family
Go from assessment intent to the exact remediation guidance.
Use the thematic hubs to understand a control family, then open the individual guide that matches a finding in your SecuTest report.
DNS security
DNSSEC, DNS integrity and externally observable DNS security findings.
Browse DNS security guides →TLS & transport
Certificates, protocol support, cipher configuration and HTTPS transport security.
Browse TLS & transport guides →Web security
HTTP security headers, HTTPS behavior and browser-facing policy controls.
Browse web security guides →What a domain assessment answers
Turn fragmented public signals into an actionable security view.
A domain can expose risk through several independent systems. SecuTest brings those signals together so you can identify weak controls, understand the evidence and decide what to fix first.
Can the domain be spoofed?
Review SPF, DKIM and DMARC controls that influence direct-domain impersonation and email authentication.
DMARC enforcement guide →Is DNS configured defensibly?
Check DNSSEC, certificate issuance policy and externally visible DNS conditions that can weaken trust or availability.
DNSSEC validation guide →Are transport controls current?
Evaluate certificate validity, protocol support and weak TLS configurations visible from the public internet.
TLS cipher guide →What does the website expose?
Review HTTPS behavior and security headers such as HSTS, CSP, clickjacking protection and referrer policy.
CSP guide →Which services are reachable?
Identify sensitive internet-reachable services that may deserve tighter network exposure or access controls.
Exposed services guide →Are there reputation signals?
Check public domain and IP reputation indicators that can affect deliverability, trust and incident response.
Domain reputation guide →How it works
A bounded assessment, not a penetration test.
SecuTest evaluates externally observable configuration and service signals. It does not authenticate to your systems, exploit vulnerabilities, perform destructive actions or claim compromise where that cannot be proven remotely.
- 01
Submit a domain
Enter the exact hostname or URL you want to assess.
- 02
Analyze public controls
SecuTest runs bounded checks across the external security surface.
- 03
Prioritize findings
Review the score, risk level, technical evidence and the highest-priority issues.
- 04
Fix and verify
Use the remediation guides, then run a new assessment to validate externally visible changes.
Who it is for
Useful before a security review, customer conversation or remediation project.
SMBs and technical teams: establish a quick external baseline without deploying an agent or granting internal access.
Security consultants: collect defensible public evidence before deeper analysis or remediation work.
MSPs and agencies: assess client and prospect domains at scale and deliver branded reports through the SecuTest partner workspace.
Start with the public surface
See what your domain exposes from the outside.
Run a free assessment first. Unlock the full report only if you need the complete evidence and remediation detail.
Run Free Scan