Six free tools. One page. See exactly where your business is exposed before an attacker does. No account needed, no software to install — just paste your domain or email and see the truth.
Find out in seconds whether your site qualifies for GI-Fortress managed protection. We check your DNS infrastructure, hosting provider, existing WAF layers, and current security header coverage — then give you a plain-English verdict and tell you exactly what we'd fix.
Check If Your Site QualifiesThe independent industry standard for website security header analysis. Paste your domain and get an instant A to F grade. Missing headers are the most common and most exploitable web vulnerability — this shows you exactly what's missing and why it matters.
A comprehensive check of your domain's email authentication setup — SPF, DMARC, DKIM, blacklist status and more. If your domain can be spoofed by fraudsters sending fake invoices or impersonating your business, this will show it.
Send a test email to the address provided and get a score out of 10 showing how likely your emails are to land in spam folders. Invaluable for anyone whose legitimate emails aren't getting through — or who wants to ensure client communications land in the inbox.
The definitive breach database — check whether your email address appears in known data breaches. If your credentials have been leaked, attackers may already have your password. The most important 30-second check anyone in business can run on themselves.
Check any email address against multiple breach databases simultaneously — including sources not covered by HIBP alone. Results in seconds. No account needed.
// We'll also email you your results. No account created. No follow-up emails.
Plain-English explanations of every major fraud and cyber crime type. Know what to look for, how criminals operate, and what to do if you are targeted.
// Source: Action Fraud — reportfraud.police.uk ✦ UK's official fraud and cyber crime reporting centre
Been targeted? Report all fraud and cyber crime to Action Fraud — the UK's national reporting centre. Your report helps protect others.
Report to Action Fraud →Run these checks in order. Each one takes under a minute. Together they give you a complete picture of your exposure.
Run SecurityHeaders.com on your domain. Anything below B is worth addressing. F means you have no protection at all.
Run MXToolbox on your domain. If SPF or DMARC are missing, your domain can be spoofed. Fraudsters use this to impersonate you.
Run your work email through Have I Been Pwned. If it appears in a breach, change that password everywhere you used it.
Run the GI-Fortress compatibility checker. If your site qualifies, we can move it from F to A grade in an afternoon.
These tools show you the surface. A full Cyber Vitals scan goes deeper — email authentication, breach exposure, attack surface, subdomain discovery, and a complete risk profile. Free, remote, no site access required.
Book Your Free Vitals Scan Get in Touch[ Remote. No site access required. Results same session. FCA broker specialists. ]