What we look at
- Public DNS records for your domain
- Email protection: SPF and DMARC policy
- Whether your site is reachable over HTTPS, and how it redirects
- Your certificate: who issued it, what it covers, when it expires
- A set of security headers on your home page
Every observation is recorded with the evidence behind it and the time it was made.
What we do not do
- No penetration testing and no exploitation
- No port scanning and no password guessing
- No logging in, and no access to anything private
- No crawling past your home page
The review only reads what any visitor to your site can already see.
How it works
- 1You submit the form and confirm your email address.
- 2You prove you control the website, with a DNS record or a file.
- 3The review runs — it takes a couple of minutes.
- 4A TCecure analyst reviews the findings before anything is sent.
- 5You get a private briefing link by email.
Request your snapshot
Only someone authorized to speak for the business should submit this request. Findings are never published and are shared only with you.
