Free external security preview
Check your website, email security, DNS and TLS signals in minutes. Safe, authorised and non-intrusive — no agents, no installation and no credit card for the free preview.
24+
External security checks
No card
Free preview first
Private
Results stay in your account
Authorised
Only assets you may assess
External posture review
Website · Email · DNS · TLS
NON-INTRUSIVE
Why this matters
Most small businesses do not need another security dashboard. They need a clear answer to a simpler question: what can the public internet see, what deserves attention and what should we do next?
Weak SPF, DKIM or DMARC can make impersonation easier and can also damage legitimate email delivery.
Legacy TLS, weak browser protections and public configuration signals can remain invisible during normal day-to-day use.
Expiry, DNSSEC, certificate and DNS policy signals can become availability or trust problems if nobody is watching them.
The internet-facing posture of a business changes over time. External visibility helps you notice drift before it becomes an incident.
What we check
The free preview reviews more than 24 external signals across website, email, DNS and TLS posture. We separate confirmed issues, hardening observations and inconclusive results instead of treating every signal as the same kind of risk.
24+
External checks in the current Free Security Preview, with deeper evidence locked until purchase.
Protect domain trust and deliverability
Review the public website posture
Find configuration and resilience gaps
Turn signals into priorities
Illustrative preview
The preview is designed to answer the first business question quickly: is the external posture healthy, or are there signals that deserve attention?
Detailed findings, technical evidence, remediation steps and the full client report remain private and locked until the relevant paid assessment is activated.
Free security preview complete
your-business.com
24 checks completed · 6 findings need attention
External security score
63/100
Medium Risk
Critical / High
0
Medium / Low
6
Passed
12
Inconclusive
2
Needs attention
6
Areas reviewed
Email Security · Website · TLS · DNS
4 hardening observations recorded separately. They do not reduce the score or inflate findings that need attention.
Illustrative example of the current preview presentation. It is not a live assessment of the example domain shown.
Security Updates
We focus on changes that connect directly to the external signals CyberWatch reviews: sender requirements, active exploitation and internet-facing security posture.
Google Gmail
Current sender guidance
Google requires authentication and TLS for senders, with SPF, DKIM and DMARC requirements becoming stricter for bulk email. CyberWatch checks the public authentication posture behind those requirements.
Read Google guidanceMicrosoft Outlook
Enforcement in effect
Microsoft requires SPF, DKIM and DMARC for high-volume domains sending to Outlook.com consumer mailboxes. Non-compliant mail can be rejected rather than simply accepted into Junk.
Read Microsoft updateCISA KEV
Continuously updated
CISA maintains the Known Exploited Vulnerabilities catalog as an authoritative list of vulnerabilities observed in real-world exploitation. CyberWatch uses threat context to help separate noise from higher-priority risk.
View CISA KEVWant to know what these changes mean for your own domain?
Run the free preview against the public signals we can safely observe.
Security explained
Useful security information should explain the business consequence and the next action, not force a client to decode acronyms before deciding what matters.
A policy and reporting layer that helps receiving mail systems handle messages that fail domain authentication and helps domain owners see impersonation activity.
Learn moreA valid certificate is important, but protocol versions, browser headers, cookies and redirect behaviour also shape your public security posture.
Learn moreThe score summarizes observed external signals. It is useful for prioritisation and trend monitoring, but it is not a guarantee that a business is secure.
Learn moreDomains, certificates, DNS, email policies and websites change. Monitoring is how a good result today becomes visibility into change tomorrow.
Learn moreClient-ready reporting
The paid assessment turns scan evidence into a structured report with business impact, priorities and practical remediation guidance.
CyberWatch AI Client Security Report
Professional Audit
Technical evidence → business impact → priority action
Ongoing protection first
For businesses that want continued visibility, Business Monitoring is the primary service. One-off checks remain available when a recurring subscription is not needed.
Entry point
£0
€0
See the score, risk level and summary counts before deciding whether you need more detail.
Recommended
£79/month
€89/month
Our main ongoing service for businesses that want continuous visibility instead of a one-off security snapshot.
Everything in Professional Audit, plus:
£149
€179
A deeper one-off automated assessment with broader evidence, risk context and a structured business report.
£49
€59
A focused one-off authorised external baseline for a small business website and domain.
Platform roadmap
The separate sandbox platform is being developed for isolated anti-phishing and suspicious-content analysis. It is not yet included in the live Business Monitoring subscription; inclusion will only be advertised after production readiness is proven.
Need human validation or a deeper scoped assessment?
Manual Report Review and Advanced Manual Audit remain separately scoped services with explicit written authorisation before deeper testing begins.
Request Manual Service