Spoofing and mail trust
SPF, DKIM, DMARC, BIMI, MTA-STS, and related signals that shape how other systems trust mail from your domain.
External exposure mapping for small businesses
See the breach path before attackers take it.
Every domain leaves a public trail. Breach Horizon maps the signals around your business, explains what they mean, and gives you a prioritized route from finding to fix.
Manage client domains? Explore Breach Horizon for MSPs →
Sample exposure map / 03 findings
External view
- Email identityDMARC / not enforced
- Web trustHTTPS / incomplete policy
- Domain sprawlStale vendor / review
Three visible signals. One practical route forward.
Illustrative data / prioritized by severity and business impact
72Exposure / attention
A safe first look
Evidence over anxiety.
Passive checks
Publicly available signals only.
No credentials
No login, agent, or software installation.
Clear next moves
Priorities your business or IT provider can act on.
01 / Sample result
A clear route forward—not a wall of warnings.
Each finding is organized by severity, business impact, and next move so you know what matters now, what can wait, and who should handle it.
- Business impact in plain English 01
- Severity and evidence 02
- Recommended next move 03
- 30/60/90-day priority view 04
Breach Horizon / Exposure readoutIllustrative data
Exposure requires attention
These sample findings show how the report connects a public signal to its business impact and practical next move.
DMARC is not enforcedEmail impersonation / Critical
HTTPS protection is incompleteWebsite trust / High
Stale vendor records need reviewDomain sprawl / Medium
Illustrative findings only. Your report is generated from public evidence for your domain.
02 / What we map
Small signals can create real business friction.
Breach Horizon focuses on the public evidence that can affect impersonation risk, customer trust, vendor reviews, and insurance readiness.
HTTPS and browser protection
TLS certificate health, HTTPS enforcement, browser security headers, and publicly visible configuration gaps.
Forgotten and lookalike domains
Subdomains, stale vendor records, takeover indicators, typosquats, and public code signals tied to your footprint.
The free scan is an external exposure check—not a vulnerability scan or penetration test. It does not attempt logins, exploit vulnerabilities, install software, or run intrusive port scans.
03 / From signal to fix
Three steps from exposed to understood.
A focused workflow that replaces raw technical output with a smaller set of decisions your business can make confidently.
-
01 / SCAN
Map public evidence
Passive, non-intrusive checks review the signals visible around your domain.
-
02 / PRIORITIZE
Understand what matters
Findings are organized by severity, business impact, confidence, and recommended timing.
-
03 / FIX
Choose the next move
Use the guidance, hand the report to your IT provider, or ask Breach Horizon to remediate the priority findings.
Done-for-you remediation
Exposure Fix Sprint
- Review the scan and agree on a focused remediation scope.
- Receive a fixed quote before work begins.
- Remediate the agreed priority findings.
- Verify the before-and-after result.
- Keep a plain-English handoff record for your team.
Fixed scope · Fixed quote · No retainer
Start with evidence
The scan narrows the conversation to the findings that matter most.
Know the scope first
Work begins only after the deliverables and fixed quote are agreed.
Finish with verification
Close the sprint with a before-and-after check and a clear handoff.
For managed service providers
Turn public exposure into a better client conversation.
Surface visible risks, explain the business impact, and give clients a clearer route from finding to fix.
Only scan domains you own, manage, or are authorized to assess.04 / A safe first look
Public evidence only. No intrusive testing.
The free exposure scan is designed to help small businesses understand their public posture without installing software or handing over credentials.
Is this a vulnerability scan or penetration test?
No. It is a passive external-exposure scan. It does not exploit vulnerabilities, attempt logins, or perform intrusive testing. Authorized penetration testing is a separate engagement.
Can I scan any domain?
Only scan domains you own, manage, or have permission to assess. MSPs may scan client domains when that authorization is part of their engagement.
Will the scan change anything?
No. The free scan reads public signals and does not modify your website, DNS, email configuration, cloud services, or user accounts.
What happens after the scan?
Your results explain the visible evidence, likely business impact, severity, and recommended next move. You decide whether to fix the findings, share them with your IT provider, or request help.
What information is requested?
The free scan asks only for the domain you are authorized to assess. Review the privacy notice for current retention and data-handling details before submitting.
Start with the exposed edge
Your domain is already telling a story. Read it first.
Map the public signals around your business, understand what matters, and leave with a practical route forward.