Free website health check
An automated check of what your business publishes about itself: your domain, who can send email as you, whether your mail is signed, what happens to fake mail, your security certificate, what a machine can read on your home page, whether your pages can be reached, and your company record. Emailed back the same working day. No charge, no account.
Requesting the free check
Send an email from your business address to [email protected] and include:
- The company’s registered name and its website address.
- The name and role of the person who can answer questions about the company’s records.
- Confirmation that you are authorised to request an assessment of this business.
- Your usual email signature, unchanged.
We reply within one working day with the scope, the fee and what happens next.
Email [email protected]What it checks
Your domain — whether your site answers on both its usual addresses, and whether the domain depends on a single name server.
Who can send mail as you — whether an SPF record is published and limits who can send.
Whether your mail is signed — whether DKIM signing can be confirmed from outside.
What happens to fake mail — whether a DMARC policy is published and actually acts.
The padlock on your site — whether the certificate is trusted and current, and whether visitors are moved to the secure address.
What a machine can read — whether the home page tells a machine what the business is.
Whether your pages can be reached — links from the home page, the page list for search engines, and anything telling them to stay away.
Your company record — whether a company of your business’s name is on the Companies House register and shown as active.
What it is not
It is not the Digital Trust Audit, and the difference matters.
No human reviews it. It produces a summary rather than findings, it makes no judgement about anything it cannot measure automatically, and it cannot earn certification. The certification is only ever earned from a human-verified assessment under the published standard, and that is what makes it worth holding.
It is not designed to worry you
An automated check whose commercial purpose is to alarm a business into paying is the oldest trick in this market, and it is the one thing a body with “trust” in its name cannot survive being caught doing.
So the rule is in the published standard, where it can be held against us: the free check must be capable of returning “nothing significant found”, and it must sometimes do so. If your setup is in good order, that is what it will say, and there will be no follow-up call.
What happens after
We email you the result, with a copy as a PDF. The check also starts a record of your business with us, so that a later check or a full assessment can be compared with it. We may contact your business about our other assessments, and every message tells you how to stop. If you ticked the box on the form, we will occasionally email you about our own assessments, and every one of those emails lets you stop.
If you want the full assessment afterwards, you ask for it.
Questions
See what your domain says about you.
Automated, emailed the same working day, and free permanently.
Request the free check