CYBER VITALS — DOMAIN SECURITY SCANNING FOR UK SMES  •  INCLUDED AS PART OF THE CYBER RESILIENCE REVIEW  •  PASSIVE — NO AGENTS, NO DOWNTIME  •  SPF • DMARC • DKIM • DNSSEC • WEB HEADERS • SSL • BREACH INTELLIGENCE  • 
GET-IT Cyber Division — Cyber Vitals

How does your domain
look to an attacker?

Most UK SMEs have no idea what their domain reveals to the outside world. Cyber Vitals is the passive OSINT scan GET-IT uses to gather structured evidence about core cyber controls — email security, web hygiene, infrastructure, and breach exposure. GET-IT then interprets those findings in the context of your business and turns them into prioritised recommendations. Cyber Vitals is included as part of the Cyber Resilience Review.

Passive — no intrusion No software to install No downtime Findings interpreted by Franco Included in the £495 Review See what’s checked ↓

A Cyber Vitals report in action

Every report covers four sections — email identity, web security, infrastructure, and digital exposure — each with a maturity score and RAG rating. Here's an example of the evidence it produces — the starting material for GET-IT's interpretation, not the end product.

GET-IT CYBER VITALS — Sample Report (Page 1 of 8)
Sample Cyber Vitals Security Assessment Report — Page 1 showing maturity score, attack surface, digital exposure, and vital signs at a glance

Sample report — facebook.com domain  |  Scanned: 2026-06-05  |  8-page full report delivered by email

Four sections, 0–100 maturity score

Cyber Vitals uses the same passive OSINT techniques attackers use — no intrusion, no agents, no impact on your systems.

Email & Identity

SPF • DMARC • DKIM • DNSSEC — up to 25 points
  • SPF record presence and enforcement level
  • DMARC policy (none / quarantine / reject)
  • DKIM signing configuration
  • DNSSEC status — protection against DNS hijacking
  • Spoofing exposure assessment

Web Security

HTTP Headers • SSL • CSP • HSTS — up to 35 points
  • Security header grade (A+ to F)
  • Content Security Policy presence and strength
  • HSTS enforcement and preloading
  • SSL/TLS certificate validity and grade
  • Secure cookie configuration

Infrastructure

Hosting • WAF/CDN • Attack surface — up to 20 points
  • Hosting provider and IP exposure
  • WAF / CDN presence (GI Fortress compatibility)
  • Attack surface score — how much is above the parapet
  • Admin endpoint exposure
  • Sensitive file discovery

Digital Exposure & Breach Intelligence

Subdomains • Footprint • Breach data — up to 20 points
  • Subdomain enumeration and control assessment
  • Digital footprint size and exposure tier
  • Domain-level breach source detection
  • Actionable vs. total asset count
  • Shadow asset identification

Scan, interpret, recommend

No software, no access credentials, no disruption to your systems.

1

Agree the scope

As part of your Cyber Resilience Review we confirm the domain to assess. That's all we need — no login, no account, no software to install.

2

We run the scan

GET-IT runs a passive OSINT analysis of your domain using the same techniques threat actors use. Typically completed within one business day.

3

Franco interprets the findings

The scan output — maturity score and RAG ratings — is weighed against how your business actually operates. An automated score alone can't tell you what matters most.

4

You get prioritised recommendations

The findings feed your Review's written report and 90-day roadmap. If you then want ongoing monthly monitoring, that's available separately.

Within the Review, or ongoing monitoring

The Cyber Vitals scan is included as part of the Cyber Resilience Review. For businesses that want to track their posture over time, monthly monitoring is available as a managed service.

Cyber Vitals — Within the Cyber Resilience Review
Included — in the £495 Review
  • Full four-section OSINT scan
  • 0–100 maturity score
  • RAG ratings per section
  • Hardening recommendations
  • Breach source intelligence
  • Findings interpreted in your business context
  • One-time snapshot — point in time
Explore the Cyber Resilience Review → Or contact GET-IT about an assessment
Cyber Vitals — Monthly Monitoring
Pricing on request — monthly
  • Everything in the Review scan
  • Monthly re-scan and trend tracking
  • Score change alerts
  • New breach detection notifications
  • Infrastructure change monitoring
  • Remediation support included
  • Ideal for CE maintenance & insurance
Talk to Franco →

Contact GET-IT about an assessment

Cyber Vitals is run and interpreted by GET-IT as part of its advisory work, most often within the Cyber Resilience Review. If you'd like to discuss whether the Review — or another form of assessment — is right for your business, get in touch.

Contact GET-IT →

[ Remote  •  No software to install  •  No obligation ]