MyIPScan
Multi-signal domain check

Domain Security Scan

Check SSL, CAA, HTTP headers, SPF, DMARC, robots.txt, sitemap, canonical, Open Graph, and schema signals from one domain entry.

Problem Domain security signals are split across SSL, DNS policy, crawl files, metadata, and headers.
Run test Enter one public domain or HTTPS URL and scan the main public signals together.
Result Review clear, review, and failed checks with a plain-language next action.
Safe sharing Use the cards first. Technical details are optional and this scan is not a security certification.
Ready Enter one public domain or URL to run the combined scan.
Technical response details (optional)

Use the plain-language cards above for decisions. This optional section is for implementation context and may be incomplete when a public endpoint is blocked or rate-limited.

Run a scan to view technical response details.

B2B diagnostic report model

Website and domain diagnostics

Public website checks connect HTTPS/SSL, redirects, headers, DNS, robots/sitemap, canonical/noindex, structured data, and social preview signals.

SummaryStart with a plain-language status for the public target.
Top issuesPrioritize the few findings that need attention first.
What passedShow expected public signals without turning them into a certification.
What needs reviewSeparate limited, unavailable, and review-worthy signals.
Why it mattersExplain the business, delivery, crawl, or implementation impact.
Recommended fixesPoint to the DNS, hosting, email, CMS, or SEO owner who can act.
What this tool cannot checkThis is not a vulnerability scan, penetration test, malware scan, uptime monitor, or full security audit.
Client-safe copyClient-safe copy should keep issue summaries and recommended fixes while avoiding raw headers, cookies, tokens, credentials, and oversized payloads.
Monitoring beta (optional)Optional monitoring beta can track public changes in SSL, redirects, headers, DNS, robots/sitemap, canonical/noindex, and metadata after a target is approved.

Client-safe report

Share findings without leaking raw technical material

Use Safe Copy or this page's summary when sending results to a client, vendor, developer, or support team. Raw headers, credentials, tokens, cookies, private addresses, email local-parts, and oversized payloads should stay out of client-facing copy.

Check my website/domain

What this checks

Public DNS, HTTP, HTTPS, certificate, redirect, header, IP/ASN, or domain configuration signals.

Limits

What this cannot check

It cannot perform credentialed vulnerability testing, scan private hosts, bypass access controls, or certify complete security.

Read results

How to use the output

Treat results as review signals for this browser/session or public target. Re-test after one change, then use Safe Copy or notes that avoid raw identifiers.