// POSTURE RADAR

🛰️ Posture Radar

Enter a domain and get an A–F security grade with prioritized fixes: email anti-spoofing (SPF/DMARC), TLS certificate, security headers, DNS hygiene and exposure.

⚖️ Only passive checks on public data (DNS, certificate, response headers, public records). Not an intrusive scan. Even so, analyze domains you own or are authorized to test.

Domain only, no http:// or paths. E.g.: cyberescudo.com

Analyzing public data…
Want to dig deeper? See also the OSINT report, the headers analyzer, the TLS check and the SPF/DKIM/DMARC checker.

🏷️ Embeddable badge

Scan your domain above, then show the grade on your site or README with an SVG badge that updates itself (refreshed whenever the domain is scanned):

<a href="https://cyberescudo.com/tool-posture">
  <img src="https://cyberescudo.com/badge/TU-DOMINIO.svg" alt="CyberEscudo security posture">
</a>

Replace TU-DOMINIO. If it has not been scanned yet, the badge shows "?"; scan it once above so the grade appears.

What it does, what data it uses and its limits

What it does
Grades a domain A–F from its mail setup (SPF and DMARC), TLS certificate, security headers, DNS and what is publicly known about its IP.
What data it uses
Public data: DNS records (over DNS-over-HTTPS), the TLS certificate, the headers of a single HTTPS request to the home page, and Shodan InternetDB. It does not scan ports or try attacks.
Limits
  • It looks at the surface, not the application: a good grade does not mean your site has no flaws.
  • If Shodan has not indexed your IP, the exposure part has no data.
  • Headers are the home page’s: other pages may send different ones.