About the work

A closer look.

I fetch your site with a plain GET and read what a browser and an attacker both see: the six security response headers, the TLS certificate (issuer, expiry, chain), and your mail-auth DNS (SPF, DKIM, DMARC). You get a short plain-text report: what's missing, what it exposes, and the exact values to set. The first read is free. The $25 is the fix list written for your stack (nginx/Apache/Vercel/Cloudflare, whatever you run) plus one re-check after you deploy. No invasive probing, only what's publicly served.