External exposure audits · Melbourne
See your business the way an attacker does.
We map what's exposed about your company from the public internet — email fraud risk, lookalike domains, weak web security — and explain it in plain English, owners first. No jargon, no scare tactics.
The snapshot is passive — it reads public data and your public DNS, and sends nothing to your servers.
yourbusiness.com.au
External exposure · score 82/100
Illustrative — your real snapshot runs live.
Could a scammer forge an invoice from your domain?
For most small businesses, the answer is yes — and they have no idea. If your domain isn't configured to reject spoofed email, an attacker can send your clients a fake invoice that looks like it came from you. It's the most common way trusted businesses lose their clients' money. We check for it in the first thirty seconds.
What we check
A complete external picture
Email & invoice-fraud posture
SPF, DKIM, DMARC and MTA-STS — can someone forge email from your domain?
Lookalike & typo domains
Registered domains impersonating yours, weaponised for phishing your clients.
Attack surface
Every subdomain and host exposed to the internet, including forgotten test sites.
TLS & certificate health
Expired, weak or misconfigured certificates that break trust and compliance.
Web hardening
Security headers, cookie flags and clickjacking protection on your live sites.
Takeover & exposed files
Dangling DNS an attacker could claim, and publicly readable .env / .git secrets.
How it works
Honest, fixed-price, founder-delivered
Talk
A free 20-minute call. We listen first — no pressure.
Scope
A written, fixed price with the scope agreed up front.
Deliver
A plain-English report: what's exposed and what to fix, ranked.
Act
We help you close the gaps, or hand it to your IT team.
No unauthorised testing
Ever. Every active check is authorised and recorded.
Plain English
Written for owners, not engineers. No fear, no jargon.
Fixed price
Agreed before we start. No surprise invoices.
Founder-delivered
By Sam. No account managers, no outsourcing.
Built for high-trust Australian businesses
Accountants · Clinics · Builders · Real estate · Legal practices · NDIS providers · Agencies — anyone who handles client data and payments, and whose reputation is the business.
Start with a free snapshot.
Thirty seconds, no signup. See your grade, then decide if you want the full review.
Run my free snapshot →