Email authentication: full SPF parser with RFC 7208 lookup counter, DMARC policy analysis, DKIM selector hints.
DNS posture: DNSSEC chain validation, CAA records, TTL consistency, dangling DNS detection, wildcard checks, BIMI.
TLS / HTTPS: cert chain, expiry monitoring, TLS 1.0–1.3 matrix, cipher inventory, HSTS, HTTP/2, PFS, SSL grade A+→F.
Infrastructure: port scan (20 well-known), tech fingerprint (CMS, frameworks, CDN), WHOIS, DNS reputation across 7 RBLs.
Reporting: branded PDF, public ranking, embeddable badge, REST API, HMAC-signed webhooks (Pro).