Free Security Tools

Know your
security posture

Two free assessments. No account needed. Results in minutes.

External Threat Scan
How exposed is your domain?
50+ automated checks across email authentication, DNS health, web defences, attack surface, and threat intelligence. No agent required.
🌐

No account needed · Takes ~60 seconds

ISO 27001:2022 Assessment
How mature is your security programme?
10 questions covering governance, access control, operations, incident response, and compliance. Get an instant maturity grade from A to E with a prioritised action plan.
Start Assessment →

No account needed · Takes ~5 minutes

Initialising scan...
Domain health
Email security
Web security
Attack surface
Threat intelligence
Scoring
Security Assessment Results
--
/ 100
Analysing...
⚠ Top findings

Your full report is one step away

Get detailed findings, remediation steps, and priority recommendations for every issue - including credential exposure and threat intelligence.

All 50+ checks detailed Remediation guidance Threat intelligence Printable PDF report ISO 27001 · NIST · OWASP · GDPR mapped

Access your full report

We'll send a secure link to your inbox to view the complete assessment.

By submitting, you agree to our Privacy Policy. EXEO may contact you about your results and related services.

📬

Check your inbox

We sent a confirmation link to .

Click it to verify your email and unlock your full security report.

🔒 No credentials required
🇪🇺 EU-hosted infrastructure
📋 ISO 27001 · NIST · OWASP · GDPR · PCI-DSS

What we analyse

50+ checks across six security domains, with findings mapped to ISO 27001, NIST CSF, OWASP, GDPR, and PCI-DSS

🌐

Domain Health

Validates your DNS infrastructure and registrar configuration for misconfigurations that could enable domain hijacking or takeover.

DNSSECCAADANE/TLSANS redundancyRegistrar lockTyposquattingAXFR
✉️

Email Security

Audits your full email authentication stack to detect spoofing vulnerabilities, deliverability gaps, and brand impersonation risk.

SPFDKIMDMARCBIMI/VMCMTA-STSTLS-RPTReporting reachability
🛡️

Web Security

Checks your web infrastructure for missing security controls, TLS configuration, WAF coverage, and exposed technology fingerprints.

HSTSCSPTLS certWAFCORSSRISensitive filesPrivacy policyCookie consent
🔍

Attack Surface

Maps externally exposed services, admin interfaces, and checks certificate transparency logs for subdomain exposure.

Open portsAdmin panelsSubdomain takeoverCloud bucketsAPI exposureCT logs
🕵️

Threat Intelligence

Cross-references your domain and IP against real-time threat feeds, malware IOC databases, email blacklists, and phishing detection services.

LeakIXIntelligence XAlienVault OTXVirusTotalDNSBLThreatFoxGoogle Safe BrowsingAbuseIPDB
Mapped to ISO 27001 NIST CSF OWASP Top 10 GDPR Art. 32 & 33 PCI-DSS