Website
Your certificate and encryption, the security settings your site sends to browsers, cookie settings, the redirect to https, and a short list of files that should never be public.
About 15 ordinary requests to your site.
Argos Scan · Free · No login
Anyone can look up your domain. Look first.
Type your domain. Argos Scan checks your website, your email records, look-alike domains and how your site tells visitors about AI. You get a grade for each, one overall grade, and a short list of what to fix first.
What we check
Four sections. One report.
Each section gets its own grade. If too few of a section's checks can run, we say so and leave it ungraded. Anything we couldn't check never counts as a pass. The overall grade needs the Website and Email sections; a section we couldn't check is left out of it, and the report says which.
SPF and DMARC decide whether someone else can send mail that looks like it came from you. We also read MTA-STS, TLS-RPT, BIMI and MX for your mail, CAA, which limits who can issue certificates for your domain, and DNSSEC, which protects your DNS answers.
Public DNS lookups only.
Brand impersonation
Up to 150 close copies of your name: swapped, missing and doubled letters, other endings, and login- or support- versions. Is each one registered? Can it receive email? Does it point to a server?
Checked in public DNS. We never visit them.
AI disclosure
Does a chat widget say it's AI? Is AI-made audio or video labelled? Is there a notice about how you use AI? Article 50 of the EU AI Act asks businesses to tell people when they are talking to an AI system, and to say when images, audio or video are deepfakes.
Read from the home page we already loaded. No extra requests.
FAQ
Straight answers.
Is this a penetration test?
No. It's a free outside look for known, common problems, the same first look an attacker takes. A penetration test is a scoped, authorized engagement where people try to get in. If you need one, we can talk you through what it involves.
How much traffic does it send to my site?
About 15 requests. Most are ordinary page and DNS lookups. A few ask for files that should never be public, such as backup and configuration files, and a few use old encryption versions no browser would use. It never tries a password, never submits a form and never looks behind a login.
Do you visit the look-alike domains?
No. We look up as many as 150 look-alike names in public DNS to see whether each is registered, can receive email or points to a server. We never connect to them. A name that uses your own name servers is marked “likely yours”.
Why is a section “Not graded”?
Because too few of its checks could run this time, and a grade on a partial look would mislead you. We show what we found and what we couldn't check. The overall grade needs the Website and Email sections. A section we couldn't check is left out of it, and we say which.
What happens to my results?
They appear on this page and you can print them or save them as a PDF. We keep them for about 15 minutes, then delete them. To stop abuse, each scan is recorded in an audit log with the time, your connection's address and the domain scanned, and the page uses Cloudflare Turnstile as a bot check.
Can I scan any domain?
Any public domain, with one exception: IA and Argos domains can't be scanned. The deeper check is different: it contacts a site more actively, so it runs only after you prove you own the domain.
Does it check for leaked passwords?
No. Breach data stays out of a scan anyone can run on anyone's domain. To check whether an address showed up in a breach, use Argos Exposure.
If I fill in the form, what do you see?
What you type, plus the domain, its grades and the number of findings. Never the details of what we found. Like every page on intelamation.com, this page also loads the site's analytics and cookie scripts.
Want a second pair of eyes?
A list of problems is only useful if someone fixes them.
In a 45-minute call we will walk through your report, tell you which fixes are quick, and which ones need a closer look.