Why One External Security Scan Is Not Enough

Use Scantide Online to check DNS and mail security, HTTPS/TLS, security headers, cookies and public infrastructure context from one domain scan.

Scantide Online reviews public DNS, mail-security records, HTTP/HTTPS behavior, TLS, security headers, cookies, infrastructure and CVE-related context to provide a readable external assessment of a domain.

Use Scantide Online to review public hosts, HTTPS, headers, DNS and infrastructure evidence for a readable first-pass public server security assessment.

Scantide Online checks public DNS and mail-security signals including SPF and DMARC as part of a broader external domain assessment.

A domain security review should connect evidence across layers instead of treating DNS, TLS and web configuration as unrelated checks.

Also, you external DNS server needs to be secured! Have a word with your ISP or whoever is running the external DNS server and see what they've got in place.

Whatever you'll be using your server for. have a look at any information that it "bleeds". This could for instance be headers telling any attacker exactly what version of software you're running. If possible, try to hide such information. There's no need for it to be visible and help a hacker find a way in. Simple checks using telnet to the ports your services might reveal some interesting information . Sadly, it's not possible to remove all headers etc but you should give it a go and remove as many as possible While on the subject, use SSL-certificates for any service where possible. Also make sure to set it up correctly (disable weak ciphers, enable HSTS, set correct HTTP headers, set TLS correctly etc ) . Have a look at Letsencrypt for instance for SSL certificates. It's free, supported by basically everyone and it'll probably get the job done for you . All you have to remember is to check that your certificates are renewed every three months.

A perfect security score (100) does not mean your systems are fully protected. This automated scan detects common vulnerabilities but cannot identify all security risks. Results may contain false positives or miss certain vulnerabilities. Always verify findings manually and implement additional security measures.

Forgotten Servers: Regularly scan your network for unknown or forgotten servers. These become prime targets - unpatched, unmonitored, and exploitable.

Currently I'm actually employed as IT Business Analyst. I still do cnsulting for external clients etc but not on a full time basis.