Free external threat check.

Enter your domain and we will run a passive, non-intrusive scan of what the internet can see about you. Results appear below in about a minute; the full PDF follows by email.

Step 1 of 1

Configure your scan

What should we check?
Biggest worry right now

Passive checks only. We never send exploit traffic without a signed scope.

sentinel@threat-check: ~ (idle)

# waiting for target ...

# fill in the form and press Start scan

Under the hood

What the check looks at.

Exposed services

RDP, SSH, databases and admin panels reachable from the internet.

TLS hygiene

Expired certificates, weak ciphers and missing HSTS.

Spoofing risk

SPF, DKIM and DMARC policies that let attackers send as you.

Credential leaks

Your domain in breach corpora and 2025–26 infostealer logs.