Question 1

What does the security grade scan check?

Accepted Answer

It checks publicly-observable signals only: email authentication (SPF, DMARC policy, and DKIM on common selectors), DNS hygiene (DNSSEC), and your website's HTTPS response headers (HSTS, Content-Security-Policy, X-Content-Type-Options, clickjacking protection, Referrer-Policy, and Permissions-Policy). It never logs into or probes your internal systems, and it does not scan ports.

Question 2

Is the security grade free?

Accepted Answer

Yes. Your A–F grade and the per-check breakdown are free with no signup. The step-by-step remediation plan for any failing or weak checks is sent to your email.

Question 3

Why does this matter for cyber insurance?

Accepted Answer

Cyber-insurance underwriters run an external scan of your domain before binding coverage. Weak email authentication and missing security headers are common reasons a business scores poorly or gets flagged. Passing these external checks removes the easiest reasons for a higher premium or a declined application.

What's your business's security grade?