Email records
Published rules for messages using your business name. A public check cannot verify every sending service.
Enter the domain after the @ in your business email. We read published email records and selected website signals. This is a focused public check, not a complete security audit.
No password or login. Public records are checked through Cloudflare and Google; selected website checks use public pages.
Published rules for messages using your business name. A public check cannot verify every sending service.
Selected settings on your website's main page. Other pages and forms are not tested.
Whether the main page tells browsers to keep using a secure connection.
Selected website addresses and file paths. An observation is a reason to review, not proof of a breach.
The free check reads what your domain publishes. During setup, we test the approved services that actually send your invoices, proposals, and updates. Those results belong in your Shield Record.
See how Shield Setup works →