Skip to main content

Check your website’s NIS2 exposure in minutes

Guard reads the public web, DNS, TLS, email-authentication and privacy controls of any domain and shows what an auditor, insurer or attacker sees first. Free scan, no account.

Guard scans the main domain: blog.example.com is scanned as example.com. Public information only, nothing on the site is exploited or changed.

Daily rescans of every area in the scan, an email when something material changes, and a dated history you can export. How monitoring works

Domains in the public report directory
150,169
Of those, rated high or critical risk
25%
Average security score, out of 100
60

Directory figures count the latest report per domain in the public directory.

A scan is a snapshot. Monitoring keeps watch.

Certificates are renewed, DNS records edited, plugins and trackers added. Each change can quietly reopen an exposure you already fixed. Monitoring rescans your domain every day, tells you when something material changes and keeps the history you need when an auditor, customer or insurer asks how long a control has been in place.

See how monitoring works

Two weeks of alerts on a sample company, with the email that lands in your inbox.

Need a one-off document instead? The full report is €39.90, unlocked from any scan result.

€25per month, per domain

Incl. 21% VAT. Cancel anytime.

  • Daily rescans of every area in the free scan
  • Email alert when a material control changes
  • Subdomain, third-party and tracker inventory kept current
  • Dated snapshots, exportable as JSON for auditors and insurers

What Guard checks

Five areas, all read from signals any visitor can see. The report scores each one, ranks findings by risk and cites the standard behind each finding, so you know what to fix first and can show why.

Email authentication

Whether mail sent in your name can be spoofed, and where it is delivered.

SPF · DKIM · DMARC · MX

RFC 7208 · RFC 6376 · RFC 9989 · RFC 8461

Transport and web security

Certificate and protocol configuration, browser-side protections and known-vulnerability indicators.

SSL/TLS · security headers · vulnerability checks

OWASP ASVS 5.0 · Mozilla Server Side TLS · RFC 8996 · MITRE CWE

Privacy and compliance posture

Indicative GDPR signals, and the NIS2 Article 21(2) measures a visitor can verify, point by point, with the internal evidence each one still needs. Evidence for an assessment, not a certification.

GDPR · NIS2 outside view · security.txt · privacy policy · cookie consent

NIS2 Art. 21(2) · Implementing Regulation 2024/2690 · RFC 9116 · GDPR Arts. 7, 12–13, 32 · ePrivacy Art. 5(3)

Technology and quality

What the site runs on and how it performs for visitors and search engines.

Technology stack · performance · mobile · SEO

External exposure

Everything the site pulls in or points to beyond its own domain.

External domains · subdomains · third-party trackers

Latest scans

Real reports, newest first. Every one is public in the directory.

Browse all reports

Questions

What Guard does, what it does not do, and what happens to the data.

Something else? Email guard@offseq.com.

Email authentication (SPF, DKIM, DMARC, MX); SSL/TLS, security headers and known-vulnerability indicators; an indicative GDPR posture including privacy policy and cookie consent; the NIS2 security measures that can be verified from outside, mapped to Article 21(2); technology stack, performance, mobile and SEO basics; and the external domains, subdomains and third-party trackers a site loads.