Core: every domain scanned against internet standards
Every domain you host is scanned against modern internet standards: IPv6, DNSSEC, RPKI, DMARC, TLS and the rest. You see immediately which ones pass and what still needs to happen to do business with parties that set requirements here, such as (semi-)government bodies.
-
IPv6, DNSSEC, RPKI, DMARC, TLS
And the rest of the modern internet standards.
-
What passes, at a glance
Per domain, you see what still needs doing.
-
Required for (semi-)government
To do business with parties that set requirements here.
Most of these standards live in the infrastructure: DNSSEC and RPKI are not something you arrange in a theme or a plugin. We run that layer, so we are the ones who can check whether it is right.
-
IPv6, DNSSEC and RPKI
On by default on our infrastructure. DNSSEC stops anyone sending your visitors to a different server, RPKI stops anyone hijacking your IP addresses.
-
TLS, HTTPS and security headers
A valid certificate is the start. The scan also looks at the headers that tell a browser what is and is not allowed, and at outdated TLS versions still switched on.
-
DMARC and security.txt
DMARC keeps forged mail in your client's name out. A security.txt tells researchers where to report a hole, instead of publishing it somewhere else.
Useful when a client sets requirements
Tenders for government and semi-public bodies often list these standards as requirements, and heavily regulated sectors such as healthcare do the same. With the scan you already have the answer, per domain, without anyone spending an afternoon working it out.
If something is missing, the scan says what it is. Often we switch it on, sometimes it belongs in the project, and then you know exactly what has to happen.
