Is your business email and website easy to fake or attack?
Free checks for Malaysian small businesses. Enter your domain to see whether someone can send email as your company, and whether your website's HTTPS and security headers are set up properly. No sign-up.
Passive only: public DNS lookups and one normal web request. No port scanning or vulnerability probing. How the checks work
Free tools
Each tool explains what it found in plain English and how to fix it.
Email security check
Can someone send email pretending to be your company? Checks MX, SPF, DKIM, DMARC, BIMI and MTA-STS.
Website security check
Is your site's HTTPS set up properly? Checks the redirect, TLS certificate and security headers.
DMARC record generator
Build the record that tells mail providers to reject fake email from your domain.
SPF record generator
List every service that sends email for you in one valid SPF record.
Independent comparisons
Published criteria, alphabetical order and a vendor source for every price. Commissions never change the order.
- Business emailGoogle Workspace, Microsoft 365, Zoho and Proton
- DMARC monitoringFree and paid report tools
- Website firewall and malware protectionCloudflare, Sucuri, Wordfence, Patchstack
- Password managers1Password, Bitwarden, Keeper, Proton Pass
- Web hosting in MalaysiaSecurity features of four local hosts
- BackupAcronis, Backblaze, IDrive
Guides
Plain-English guides that link to official Malaysian sources such as JPDP, NACSA and the NSRC.
- Email spoofing and invoice scamsWarning signs, and what to do: call NSRC 997
- PDPA security checklist72-hour breach notification, DPO rules
- Cyber Security Act 2024What Act 854 means for an SME
- SPF, DKIM and DMARC setupStep by step, with example records
- Website security headersHSTS, CSP and safe starting values