Website Security
We look for visible security concerns and basic protections around your website.
What can someone learn about your business just by looking from the outside?
Your website, domain, email system, and security configuration expose information to the Internet every day. Some of it may reveal security issues you don’t know are there.
See what your public footprint reveals.
We review visible website, domain, HTTPS, and email-protection signals, then report what may warrant a closer look.
Get started
Start your FREE Website Security Diagnostic
First, tell us which website you authorize us to check. Then you can share what you know about your technical environment while the diagnostic runs.
This service is for new clients to check a website from their own domain. Sometimes they are unsure which services they should use. If you are an existing client and want to run the diagnostic scan, you can do so from inside your client portal.
Loading secure diagnostic…
What We Check
Email Protection
We check whether SPF, DKIM, and DMARC protections can be identified and flag configurations that may need improvement.
HTTPS & Encryption
We review your website’s HTTPS and certificate posture for signs that additional testing may be worthwhile.
Domain & DNS
We examine publicly visible domain and DNS information for conditions that deserve attention.
Technology Exposure
We look at what your website reveals about the technology behind it and identify areas that may warrant deeper investigation.
What You’ll Get
A straightforward report showing:
- What we observed
- What looks good
- What may need attention
- Why it matters
- Whether we recommend taking a closer look
If something deserves deeper investigation, we’ll recommend the appropriate SunTzu security assessment.
And if we don’t see a reason for additional testing, we’ll tell you that too.
This Isn’t a Penetration Test
This review is intentionally quick and broad. It uses passive information and lightweight external checks to identify potential areas of concern.
It is not a comprehensive vulnerability assessment, penetration test, compliance audit, or guarantee that a system is secure. Some security issues can only be identified through deeper testing.
Think of it as a security checkup:
First, let’s find out where we should look.
See What Your Website Is Telling the Internet
The same public information available to customers, vendors, and attackers can reveal a surprising amount about your security posture.
Let SunTzu take the first look.