Check your website’s NIS2 exposure in minutes
Guard reads the public web, DNS, TLS, email-authentication and privacy controls of any domain and shows what an auditor, insurer or attacker sees first. Free scan, no account.
- Domains in the public report directory
- 150,151
- Of those, rated high or critical risk
- 25%
- Average security score, out of 100
- 60
Directory figures count the latest report per domain in the public directory.
What Guard checks
Five areas, all read from signals any visitor can see. The report scores each one, ranks findings by risk and cites the standard behind each finding, so you know what to fix first and can show why.
- Email authentication
Whether mail sent in your name can be spoofed, and where it is delivered.
SPF · DKIM · DMARC · MX
RFC 7208 · RFC 6376 · RFC 9989 · RFC 8461
- Transport and web security
Certificate and protocol configuration, browser-side protections and known-vulnerability indicators.
SSL/TLS · security headers · vulnerability checks
OWASP ASVS 5.0 · Mozilla Server Side TLS · RFC 8996 · MITRE CWE
- Privacy and compliance posture
Indicative GDPR signals, and the NIS2 Article 21(2) measures a visitor can verify, point by point, with the internal evidence each one still needs. Evidence for an assessment, not a certification.
GDPR · NIS2 outside view · security.txt · privacy policy · cookie consent
NIS2 Art. 21(2) · Implementing Regulation 2024/2690 · RFC 9116 · GDPR Arts. 7, 12–13, 32 · ePrivacy Art. 5(3)
- Technology and quality
What the site runs on and how it performs for visitors and search engines.
Technology stack · performance · mobile · SEO
- External exposure
Everything the site pulls in or points to beyond its own domain.
External domains · subdomains · third-party trackers
A scan is a snapshot. Monitoring keeps watch.
Certificates are renewed, DNS records edited, plugins and trackers added. Each change can quietly reopen an exposure you already fixed. Monitoring rescans your domain every day, tells you when something material changes and keeps the history you need when an auditor, customer or insurer asks how long a control has been in place.
Need a one-off document instead? The full report is €39.90, unlocked from any scan result.
€25per month, per domain
Incl. 21% VAT. Cancel anytime.
- Daily rescans of every area in the free scan
- Email alert when a material control changes
- Subdomain, third-party and tracker inventory kept current
- Dated snapshots, exportable as JSON for auditors and insurers
Latest scans
Real reports, newest first. Every one is public in the directory.
- 2026-10-27T14:24:59.563Z
ervy.app
Ervy — Technology
88
LOW RISK2026-10-27T14:24:59.563Z - 2026-10-27T14:24:59.542Z
clearjunction.com
Clear Junction — Finance · United Kingdom
89
LOW RISK2026-10-27T14:24:59.542Z - 2026-10-27T14:24:59.526Z
akerbp.com
Aker BP ASA — Energy · Norway
87
LOW RISK2026-10-27T14:24:59.526Z - 2026-10-27T14:24:59.510Z
visualfactory.net
Nomuda — Manufacturing
85
LOW RISK2026-10-27T14:24:59.510Z - 2026-10-27T14:24:59.489Z
jak.lv
Jēkabpils Tehnoloģiju tehnikums — Education · Latvia
80
LOW RISK2026-10-27T14:24:59.489Z - 2026-10-27T14:24:59.461Z
edy365.com
Education · Latvia
85
LOW RISK2026-10-27T14:24:59.461Z - 2026-10-27T14:24:59.440Z
devlat.eu
84
LOW RISK2026-10-27T14:24:59.440Z - 2026-10-27T14:24:59.415Z
canarylabs.eu
Technology
49
Partial2026-10-27T14:24:59.415Z - 2026-10-27T14:24:59.398Z
niceincontact.com
Nice Ltd. — Technology · United States
87
LOW RISK2026-10-27T14:24:59.398Z - 2026-10-27T14:24:59.375Z
nist.gov
National Institute of Standards and Technology — Government · United States
94
LOW RISK2026-10-27T14:24:59.375Z - 2026-10-27T14:24:59.318Z
siguldassaldejums.lv
Siguldas saldējums — Hospitality · Latvia
86
LOW RISK2026-10-27T14:24:59.318Z - 2026-10-27T14:24:59.243Z
devinci.fr
Pôle Léonard de Vinci — Education · France
88
LOW RISK2026-10-27T14:24:59.243Z
Questions
What Guard does, what it does not do, and what happens to the data.
Something else? Email guard@offseq.com.