Seven free tools. One page. See exactly where your business is exposed before an attacker does. No account needed, no software to install — just paste your domain or email and see the truth.
Find out in seconds whether your site qualifies for GI-Fortress managed protection. We check your DNS infrastructure, hosting provider, existing WAF layers, and current security header coverage — then give you a plain-English verdict and tell you exactly what we'd fix.
Check If Your Site QualifiesThe independent industry standard for website security header analysis. Paste your domain and get an instant A to F grade. Missing headers are the most common and most exploitable web vulnerability — this shows you exactly what's missing and why it matters.
A comprehensive check of your domain's email authentication setup — SPF, DMARC, DKIM, blacklist status and more. If your domain can be spoofed by fraudsters sending fake invoices or impersonating your business, this will show it.
Send a test email to the address provided and get a score out of 10 showing how likely your emails are to land in spam folders. Invaluable for anyone whose legitimate emails aren't getting through — or who wants to ensure client communications land in the inbox.
The definitive breach database — check whether your email address appears in known data breaches. If your credentials have been leaked, attackers may already have your password. The most important 30-second check anyone in business can run on themselves.
Enter any email address and check it against multiple breach databases simultaneously — including sources not covered by HIBP. Results in seconds. Part of the GET-IT integrated security suite, powered by the same engine as Cyber Vitals.
The official Action Fraud / Report Fraud reference published by the City of London Police. Plain-English definitions of every major fraud and cyber crime type — from APP fraud and BEC to phishing, ransomware and vishing. Essential reading for any business owner who wants to recognise an attack before it lands.
Run these checks in order. Each one takes under a minute. Together they give you a complete picture of your exposure.
Run SecurityHeaders.com on your domain. Anything below B is worth addressing. F means you have no protection at all.
Run MXToolbox on your domain. If SPF or DMARC are missing, your domain can be spoofed. Fraudsters use this to impersonate you.
Run your work email through Have I Been Pwned. If it appears in a breach, change that password everywhere you used it.
Run the GI-Fortress compatibility checker. If your site qualifies, we can move it from F to A grade in an afternoon.
These tools show you the surface. A full Cyber Vitals scan goes deeper — email authentication, breach exposure, attack surface, subdomain discovery, and a complete risk profile. Free, remote, no site access required.
Book Your Free Vitals Scan Get in Touch[ Remote. No site access required. Results same session. FCA broker specialists. ]