Security Scan / V1

A clearer view of your public security posture.

For small businesses and organizations that want practical guidance on their domain's external configuration. Frontline reviews bounded evidence and gives you priorities you can discuss with your IT team.

Request a Security Scan

DNS & email posture

SPF and DMARC configuration for the explicitly authorized email sending domain. If the sending domain is not confirmed, email coverage is recorded as unknown.

TLS & HTTPS

HTTPS availability, certificate validity and HTTP-to-HTTPS redirect behavior on the approved hostname.

Public root page

Root-page response checks for HSTS, Content Security Policy, framing restrictions and MIME sniffing protection where supported and observable.

Explicit scope. Explicit permission.

V1 begins with one authorized public hostname and its root page. Additional domains, subdomains or a separate sending domain need explicit written approval. Redirects to another hostname are outside the assessment. Frontline verifies authorization before execution; submitting the form does not start a scan.

No crawling, authenticated pages, internal network access, login attempts, exploit payloads or intrusive penetration testing. A point-in-time external configuration review cannot prove security, compliance or certification. Unavailable checks remain unknown, and insufficient coverage suppresses the overall score.

A practical report you can use.

A staff-reviewed report with observed evidence, timestamps where collected, scope, coverage and limitations, prioritized recommendations and the available scanner/model version. The report separates observed results from unknowns.

Request a scoped quote

Frontline confirms price, domain limits, deliverables and report turnaround in the written quote before work begins. There is no automatic scan or fixed delivery guarantee. Remediation and retesting are separate unless explicitly included.

Request a Security Scan

Tell us which domain you are authorized to have reviewed. We will confirm scope, authorization and the delivery schedule with you.

One public hostname per request. Enter the hostname only, without https://, paths or ports. Additional domains, subdomains and a separate email sending domain require agreed written scope.

We save your contact details, domain and acknowledgements to handle this request. To request access, correction or deletion, email kevin@frontlineconsultant.com. This request is not a purchase or automatic scan.

Trouble submitting? Email Frontline as a fallback.