For small businesses facing a cyber insurance application or renewal
Could criminals send email as you?
Insurers now ask whether your email is protected against spoofing and whether your website is properly secured. Enter your business domain to get an instant A–F grade and plain-English fixes.
We only read public DNS records and load your homepage once — the same as any visitor. Nothing is scanned or attacked.
Get early access
We're launching a full insurance readiness report that grades the rest of your application. Leave your email to hear when it's ready — no spam.
Email is only part of the insurance application
Underwriters also ask about MFA, endpoint protection, backups, an incident response plan and staff training. Our template pack walks you through the 15 questions they ask most, with the policies and plan you need.
Get the readiness template packWhat we check
- SPF — which servers may send email for you
- DMARC — what receivers do with forged email using your name
- DKIM — whether your email is digitally signed
- HTTPS — certificate, encryption version and redirects
- Security headers — browser protections on your website
Why it matters
Spoofed email is how most invoice and wire-transfer fraud starts. Missing SPF and DMARC are among the easiest gaps for an attacker — and for an underwriter — to spot from the outside.
This free grade covers what can be seen publicly. It does not test your internal systems and is not a guarantee of insurability.