Before someone else finds the gap, find it yourself.

What we scan

We focus the scan on the security signals that actually surface in the real world — the ones that throw browser warnings on your visitors, that let your domain get spoofed in phishing campaigns, and that quietly leak through misconfigured headers. The scan is powered by DM3, the platform we built to monitor every Strata Logic client website. The free version runs the same core checks against any URL you give it, then sends the report through.

• SSL / TLS certificate

  We check the certificate serving your domain — that it's present, valid and trusted by browsers. A misconfigured or expired certificate is the single fastest way to lose a visitor: it throws a full-page warning before they ever see your homepage.

• Email security — DMARC + SPF

  We check whether your domain publishes DMARC and SPF records — the DNS-level protection that stops attackers from sending phishing email that looks like it came from you. Most small-business domains we scan are still wide open here.

• HTTP security headers

  We check the HTTP response headers your site sends to every visitor — the ones that tell the browser how to behave defensively. These cost nothing to add and are routinely missing on sites that otherwise look polished from the outside.

• Domain health

  We surface the domain-level signals that affect both deliverability and trust — registration posture, DNS configuration, and whether the domain itself is doing anything that hurts its reputation. This is the layer most owners never look at.