Free outside-in check for small businesses
See your business the way attackers — and insurers — see it.
Enter your website address. In about 15 seconds, DeBough checks what anyone on the internet can see about your business and tells you exactly what to fix, in plain English.
No sign-up. No install. Nothing touches your systems.
What we check
The same public signals criminals use to pick targets — and that many cyber insurers review when you apply or renew.
Email impersonation
Can a criminal send an email that looks like it came from you? We check SPF, DKIM, and DMARC — the records that tell Gmail and Outlook to block fakes.
Website security
Is your padlock valid and not about to expire? Do visitors get moved to the secure version of your site automatically?
Domain health
Is your domain close to lapsing? Is it locked against being transferred away? Lose the domain and you lose your email.
Lookalike domains
Has someone registered a domain one letter off from yours? That's often the first step of a fake-invoice scam aimed at your customers.
How we work
A security tool should earn your trust by asking for as little as possible. DeBough is built to be useful without ever getting inside your business.
- We only look at what anyone on the internet can already see.
- No software to install. We never connect to your computers or network.
- We never ask for passwords or access to your email.
- We report what we observe. We'll never tell you you're “fully secure” — no honest tool can.
Takes 15 seconds. Worth knowing.
DeBough reports what it could observe from the public internet at the time of the scan, plus anything you told us. It is not a security audit, penetration test, certification, or guarantee of compliance or protection.