Domain Security Scanner
Passive external posture checks, graded A–F
Lite · Passive Checks

Domain Security Assessment

Request an automated, read-only assessment of your domain or public IP — certificate validity, security headers, DNS and email security, common ports, and more — powered by Rogue Logics cybersecurity expertise. Requests are verified by email and reviewed before a scan runs; results are ready minutes after your scan starts.

Request Your Scan

What happens next: you verify your work email, the RogueLogics team reviews the request (a manual step), you receive an access code by email, and the scan runs in minutes once you enter it.

Must be a corporate email — personal emails (Gmail, Yahoo, etc.) are not accepted.

Enter a domain or a public IP address. Private or internal IPs (e.g. 10.x, 192.168.x, 127.0.0.1) are not supported. For IPs we run the web, TLS, and common-port checks; domain-name checks (DNS/email/WHOIS) don't apply.

Already requested a scan? Verify & continue →

Verified and awaiting approval? Check request status →

What You'll Discover

Your Security Score (0–100)

A–F grade with per-check breakdown showing exactly where your domain stands.

8-Point Security Check

SSL/TLS, HTTP headers, DNS records, open ports, cookies, mixed content, server fingerprint, and WHOIS.

Vulnerability Findings

Specific issues found with severity indicators and actionable remediation guidance for each.

Remediation Steps

Clear fix instructions for every failing check — what to change, where, and why it matters.

Downloadable PDF Report

Professional report you can share with your team, management, or compliance auditors.

Priority Ranking

Issues ordered by risk impact so you know what to fix first for maximum security improvement.

What We Scan

SSL/TLS Certificate
Certificate validity window and issuer — flags expired, expiring-soon, and not-yet-valid certificates
HTTP Security Headers
Check HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
DNS Records
Verify SPF, DKIM, and DMARC email authentication to prevent spoofing
Open Ports
Scan 16 common ports for exposed services like SSH, MySQL, RDP, and FTP
WHOIS Info
Domain registration, expiry dates, registrar, and name server details
Cookie Security
Inspect Secure, HttpOnly, and SameSite flags on all cookies
Mixed Content
Detect insecure HTTP resources loaded on HTTPS pages
Server Fingerprint
Identify exposed server technologies, versions, and framework signatures

Who This Is For

  • •CTOs & Engineering Leads assessing their domain's external attack surface
  • •Security Teams running baseline checks before a full penetration test
  • •DevOps Engineers validating security headers, SSL, and DNS configuration
  • •Anyone curious about their domain's security posture and quick wins

Disclaimer: This tool performs an automated surface-level security assessment. It is not a formal penetration test, security audit, or guarantee of security. Comprehensive security requires professional manual testing with tools like Burp Suite, Nmap, and OWASP ZAP.

Your email is used only for verification and sending scan results. Domain data is processed in real-time and retained only for report delivery.