Question 1

What domains are included in this data?

Accepted Answer

This data is aggregated from external security scans of SMB (small and medium business) domains. All scans are passive and external — we never access servers, install agents, or require credentials.

Question 2

How often is this data updated?

Accepted Answer

Statistics are updated monthly from our automated scanning pipeline. The "last updated" date shown on this page reflects the most recent data refresh.

Question 3

What do the 16 security modules check?

Accepted Answer

Our scanner checks SSL/TLS certificates, DNS configuration, DNSSEC, email authentication (SPF, DMARC, DKIM), HTTP security headers, open ports, breach exposure, blacklist presence, cookie security, JavaScript vulnerabilities, domain reputation, subdomains, technology stack, trackers, WAF detection, and WHOIS data.

Question 4

How is the security score calculated?

Accepted Answer

Each domain receives a 0-100 score based on findings across all 16 modules. Critical issues (expired SSL, missing DMARC) weigh more heavily. The score maps to an A-F letter grade.

SMB External Security — Live Data