CyberCheck
A passive, public-only check designed to show the external security hygiene signals that a small business can improve without giving us credentials or access to internal systems.
What CyberCheck is designed to check
CyberCheck will examine publicly visible configuration only. The planned checks include:
- HTTPS availability, certificate validity, TLS support and redirect behaviour.
- Common browser-protection headers and obvious mixed active content.
- Email-domain hygiene including SPF and DMARC.
- Selected DNS and domain-security signals such as DNSSEC, CAA and security.txt.
- Canonical hostname consistency and limited technology disclosure.
What it will not do
CyberCheck is intentionally limited. It is not a penetration test and will not attempt to exploit your systems.
- No passwords or credentials.
- No brute-force attempts or login testing.
- No vulnerability exploitation.
- No intrusive crawling or directory enumeration.
- No SQL injection or cross-site scripting tests.
- No broad port scanning beyond normal web connectivity.
An external hygiene score, not a claim that you are “secure”
The planned result is an External Security Hygiene Score. It is intended to help prioritise visible configuration issues. It will not claim that a business is a percentage “secure” and it cannot prove the absence of vulnerabilities inside systems it cannot see.
Designed for proportionate first steps
For many small businesses, the useful question is not “Are we completely secure?” but “What is visibly weak, what matters most, and what should we improve next?” CyberCheck is being built around that question.
Want to know when it is ready?
Email info@bootstatelabs.com and ask to be notified when CyberCheck opens for public use.