Monitoring & Risk

11 articles

Threat Intelligence: how risky is this domain's infrastructure? An on-demand security scan of a domain: security grade, open ports, known vulnerabilities, malware associations and third-party cyber-risk ratings. → Geo Intelligence: where your mail and your spoofers come from A world map of where mail using your domain originates, with failing traffic highlighted by country, so abuse from places you don't do business stands out instantly. → Bulk Senders: meet the Google, Yahoo and Microsoft rules Check your domain against Google, Yahoo and Microsoft bulk-sender rules: readiness score, per-provider verdict and a one-click-unsubscribe validator. → ASM: DNS & Risk: find dangling DNS records Finds DNS records that still point at services you no longer control, which an attacker can claim and use to send mail or host content as you. → App Security: check your website's security headers A scan of the HTTP security headers your website sends (HSTS, CSP, X-Frame-Options and four more), with a score, what's missing and the suggested fix. → SMTP Security: do your mail servers support encryption? Checks each of your mail servers for STARTTLS support and the TLS version negotiated, so you know inbound mail can be delivered to you encrypted. → Certificate Monitor: catch expiring SSL/TLS certificates Tracks the SSL/TLS certificates on your monitored hosts, grades them, and flags anything with fewer than 30 days left so an expiry never breaks mail or your website. → Lookalike Monitoring: find domains impersonating yours Automatic detection of typosquat and lookalike domains registered to impersonate you, with a live analysis of each and a one-click takedown request. → SubdoMailing Guard: stop attackers sending from your subdomains Finds dangling MX, broken SPF and dangling CNAME records on your subdomains that attackers can hijack, and gives you the exact record to remove. → Subdomain Monitor: find subdomains you forgot about Discovers the subdomains of each domain you own and checks whether each one has its own DMARC protection, so a forgotten subdomain never becomes the weak link. → Vendor Risk: keep an eye on the companies sending mail for you Track every third party that sends email on your behalf: security grade, breach history, DMARC and SPF status, and the vendors they depend on. →