Free tools for your website, email and domain

11 free checks and record builders for small businesses. No account, nothing to install, and every result explained in plain English with the fix. Not sure where to start? Scan your website: it runs most of the checks below at once.

Free, no account. We only read what any visitor can see.

Which tool do I need?

If this happenedUse
A customer says your website will not loadIs it down? Check any website
The browser shows "Not secure" or a certificate warningFree SSL checker
You received a renewal notice and are not sure it is realFree domain expiry checker
Customers got an invoice that looked like it came from youFree brand impersonation check
Your email lands in junk, or someone sent email as youFree email security checker
Email stopped arriving, or you need to know where your DNS is managedFree DNS lookup
You were told to set up SPF before using a newsletter toolFree SPF record generator
Google or Microsoft asked you to publish a DMARC recordFree DMARC record generator
Your insurer or a customer asked about website securityFree security headers checker
A service you use announced a data breachWas my email in a data breach?
You do not know what your website is built on or how old it isFree website scan

Website

Whether your site is up, what it runs, and whether visitors' connections are protected.

  • Free website scanPaste your address and see the platform, plugins and libraries your website runs, its certificate, domain and email security, and which alerts to turn on. No account needed.
  • Free SSL checkerCheck any website's SSL certificate: expiry date, issuer, which names it covers, protocol, and chain or trust problems, explained in plain English.
  • Is it down? Check any websiteCheck whether a website is down for everyone or just you: status code, response time and the plain-English cause (DNS, server, certificate, slow), checked from our servers.
  • Free security headers checkerCheck your website's security headers (HSTS, Content-Security-Policy, X-Frame-Options and more), graded in plain English with the line to add.

Email

Whether scammers can send email in your name, how to stop them, and whether your addresses have leaked.

  • Free email security checkerCheck whether anyone can send email pretending to be your domain: SPF record and policy, DKIM selectors, DMARC policy and reporting, and who your mail provider is.
  • Was my email in a data breach?Check one email address against every public data breach Have I Been Pwned knows about. The result shows which breaches, what leaked and what to do. We never store or log the address.
  • Free DMARC record generatorBuild a DMARC record in plain English: pick a policy and a report address, then get the exact TXT record, where to add it and what you publish now.
  • Free SPF record generatorBuild one SPF record for every service that sends email as you, with a live count of the DNS lookups it needs against the limit of 10.

Domain and brand

Whether your domain is about to lapse, and whether someone has registered one that looks like it.

  • Free domain expiry checkerCheck when a domain name expires, who the registrar is and whether it is on hold or pending delete, from the registry's own RDAP record. Says so when a registry hides the date.
  • Free brand impersonation checkType your domain and see which lookalike domains are already registered and live, whether anyone can send email pretending to be you, and the certificates recently issued for your name. Free, about 30 seconds.
  • Free DNS lookupLook up a domain's DNS records (A, MX, NS, TXT, CAA, SPF and DMARC), see what each one does and who runs the DNS, and check a DKIM selector.

Get told before it becomes a problem

The tools answer once. A free account keeps checking your website, certificate, domain and email security every day and tells you in plain English when something changes.