I have developed a tool for auditing web domains. It is based on seven security modules that assess the security status and the risk to which your domain is exposed, assigning it a score from 0 to 100 depending on its status.
The modules analysed include certificates, exposed headers, DNS, email authentication mechanisms, exposed routes and GDPR compliance, amongst others.
I began developing it with a focus on SMEs and businesses that do not have an IT department and only request support when they have a technical problem, and to make it easier for people working in the sector to resolve configuration issues and detect potential security breaches more easily.
If you have a moment, I’d be grateful if you could take a look to see what you think or suggest any improvements. The tool is already in production, but it’s always useful to hear other suggestions or receive constructive criticism to help us improve day by day.
Thank you and best regards
How intrusive are the checks if you're assessing email authentication?
Check the settings for the DKIM, DMARC and SPF protocols. If they are not configured correctly for example, if their status is: (none) or if you are not using them at all, I can help you set them up.
What in the name of $DEITY is that map projection?
hahaha It’s purely visual a sort of real-time emulator, a bit like Kaspersky’s CyberMap.