Full Report

Every finding, and the fix for each.

The free check tells you what is wrong. The Full Report tells you exactly how to put it right, in the order that matters.

£50 one-off · per domainA PDF you keep

What is in it

Every finding, with its severity

Nothing held back, each marked by how much it matters.

What it means for you

One plain paragraph for each finding: what an attacker could do with it.

A step-by-step fix

The record to publish or the setting to change, written for the person who will do it.

A plan in priority order

What to do first, and what can wait.

A PDF to hand on

Give it to your IT team or your supplier. It is yours to keep.

Free check or Full Report

What the free check and the Full Report include
What is includedThe free checkFull Report
Score out of 100 and its word✓Included✓Included
Number of findings✓Included✓Included
Each danger in plain English✓Included✓Included
Every finding named, with its severityNot included✓Included
A step-by-step fix for eachNot included✓Included
A plan in priority orderNot included✓Included
A PDF to keepNot included✓Included

A look inside

Full Report · harbourview.exampleScreenshot to come

Anyone can send email as this domain

What it means
A fake invoice from this address would reach the inbox
Fix first
The fix
Move DMARC from p=none to p=quarantine, then to p=reject
Email

The plan, in priority order

1. DMARC policy
Email
Fix first
2. TLS versions
Website
Next
3. CAA records
DNS
Can wait

What happens next

Keep it live

Posture Monitoring re-checks the domain every night and emails you when something changes. £29 a month, and the first month is free with the Full Report.

Posture Monitoring

Have us fix it

We make the fixes and prove them with a before-and-after scan. The £50 is credited back.

Have us fix it

Questions

How do I get it?

Pay once, in the portal. The button above takes you there with your domain already filled in.

Is it a subscription?

No. £50, once, for one domain.

What if I want it kept up to date?

That is Posture Monitoring.

Do I need to prove the domain is mine?

No. The Full Report reads only what is public, so it is the same full scan whether or not you have proved the domain is yours.

How do I pay?

Once, by a bank payment through GoCardless that you approve in your bank's app. If your bank cannot make one, the same single payment is collected by Direct Debit.

Start with the free check.

It reads your SPF, DKIM and DMARC records in about 30 seconds, and tells you where you stand today.