External surface discovery
Lists your subdomains from Certificate Transparency logs and public DNS, and flags forgotten test environments, exposed admin interface names and dangling records.
Other tests
Security headers test
Grades HSTS, CSP and cookie settings.
SSL/TLS check
Certificate chain, protocols, weak ciphers.
Email security check
SPF, DKIM and DMARC: can someone send fake email in your name?