Nine deep analyses. One report.
Every test runs against real APIs in real time. No mock data – exactly what professionals use manually.
What you actually get out of FortifyNet
Behind every technical check is a concrete business outcome. Here's what you win.
Protect your brand from hijacking
Catch expiring SSL certificates and DNS changes before your customers see a warning page – and before your reputation suffers.
Stop customer data being sold on the dark web
Know instantly if your or your employees' credentials appear in a leak, so you can act before the damage is done.
A faster site means more business
Slow pages lose customers. We show exactly what's slowing your site down and how to fix it for better SEO and conversion.
Sleep easy with GDPR & NIS2 handled
Identify tracking without consent and missing policies before an audit does it for you. Avoid fines and embarrassment.
Get alerted – not surprised
24/7 continuous monitoring means you get an email when something changes, not a call from an angry customer.
Impress your own clients
White-label reports let MSPs and agencies deliver professional security reports under their own brand.
SSL/TLS
SSL Labs API
In today's digital landscape, robust website security is non-negotiable, and the cornerstone of this security is a properly implemented SSL/TLS certificate. FortifyNet provides an in-depth SSL certificate checker that goes far beyond basic validation, ensuring your website maintains an impenetrable front against cyber threats while boosting its SEO ranking. Our advanced TLS website security analysis meticulously evaluates your certificate setup using the renowned SSL Labs API, delivering a comprehensive grade from A+ to F. This includes a thorough examination of your certificate chain validation, ensuring all intermediate certificates are correctly configured for optimal trust. We delve into the intricacies of cipher suites to verify that only strong, modern encryption algorithms are in use, safeguarding sensitive data in transit. Furthermore, our system checks for HSTS (HTTP Strict Transport Security) implementation, a vital header that forces browsers to interact with your site only over HTTPS, preventing protocol downgrade attacks. To ensure continuous protection, FortifyNet provides SSL expiration reminders 30 and 7 days before your certificate expires, preventing costly downtime and security warnings for your visitors.
DNS & Email Security
Google DNS API
The Domain Name System (DNS) is the internet's phonebook, and its security is paramount for your website's availability and your brand's reputation. FortifyNet offers a comprehensive DNS security scanner coupled with specialized email security checks to shield your domain from sophisticated cyber threats like email spoofing and phishing. We meticulously analyze your domain's DNS records, focusing on critical configurations such as SPF (Sender Policy Framework) validation. SPF records help prevent unauthorized senders from using your domain, significantly reducing the risk of spam and phishing emails. Our system also scrutinizes your DMARC (Domain-based Message Authentication, Reporting & Conformance) policy, ensuring it's configured to 'quarantine' or 'reject' illegitimate emails, not just 'none', thereby actively protecting your recipients. Crucially, we perform DNSSEC (Domain Name System Security Extensions) checks to verify the authenticity of DNS data, preventing cache poisoning and other DNS-based attacks. Furthermore, MX record validation ensures your email routing is correctly set up, while CAA (Certification Authority Authorization) records prevent unauthorized SSL certificate issuance for your domain.
Performance & SEO
Google PageSpeed Insights
In the competitive online arena, website performance and SEO are inextricably linked. A fast, responsive, and user-friendly website not only delights your visitors but is also heavily favored by search engines. FortifyNet integrates with Google PageSpeed Insights to deliver a powerful website performance audit that drives both user satisfaction and SEO ranking improvements. Our analysis focuses on critical metrics like the Lighthouse Performance Score, providing an overall health check of your site's speed and efficiency. We pinpoint issues affecting the Largest Contentful Paint (LCP), ensuring your main content loads quickly, a key factor in user perception and Google's Core Web Vitals. The Total Blocking Time (TBT) metric helps identify JavaScript execution issues that hinder interactivity, improving your site's responsiveness. Furthermore, we assess Cumulative Layout Shift (CLS), preventing unexpected layout movements that frustrate users. Beyond core performance, our tool evaluates your site's general SEO score and adherence to Best Practices outlined by Google, covering aspects from mobile-friendliness to crawlability.
HTTP Security Headers
Live HTTP Header Check
Beyond server and network security, browser-side defenses play a critical role in safeguarding your website and its users. HTTP security headers are powerful directives that instruct web browsers on how to behave when interacting with your site, effectively preventing a wide array of client-side attacks. FortifyNet's live HTTP header checker meticulously scans your website's responses to ensure these vital headers are correctly configured, hardening your defenses against common vulnerabilities. We verify the implementation of HSTS (HTTP Strict Transport Security), which forces browsers to use HTTPS, thwarting insecure connections. Our analysis includes a deep dive into your Content Security Policy (CSP), a crucial header that prevents XSS (Cross-Site Scripting) attacks by controlling the resources (scripts, stylesheets, etc.) that a browser is allowed to load. We check for X-Frame-Options to mitigate clickjacking by preventing your site from being embedded in malicious iframes. Furthermore, we examine X-Content-Type-Options to prevent MIME-sniffing vulnerabilities, and Referrer-Policy to manage information leakage when users navigate from your site.
Dark Web
HaveIBeenPwned API
The dark web is a hidden part of the internet where stolen data and illicit activities thrive, posing a constant threat to businesses and individuals alike. FortifyNet offers proactive dark web monitoring by leveraging the robust HaveIBeenPwned (HIBP) API, providing an essential layer of defense against data breaches and compromised credentials. Our service scans billions of exposed records to identify if any email addresses or passwords associated with your domain have been leaked in known breaches. This includes searching through over 12 billion exposed accounts, meticulously cross-referencing your organizational data against comprehensive databases of breached information. We provide insights into specific breach events, detailing which services were compromised, the type of data exposed, and when the breach occurred, enabling informed and rapid response. In the event of a compromise, FortifyNet offers GDPR reporting guidance and an incident response checklist to help you navigate the necessary legal and technical steps. Furthermore, we emphasize the importance of a strong password policy to mitigate risks stemming from credential stuffing.
Exposure Scan
Vulnerability Discovery
Many websites inadvertently expose sensitive information, creating hidden pathways for attackers. FortifyNet's Exposure Scan is a powerful vulnerability assessment tool designed to meticulously crawl your website and identify publicly accessible assets that could lead to data leaks or security breaches. This specialized scan goes beyond traditional checks to uncover a range of critical exposures, including exposed files such as configuration files, backup directories, or sensitive documents that should remain private. We detect JavaScript secrets embedded within your client-side code, which often contain API keys, authentication tokens, or other credentials that could be exploited. Furthermore, our scanner identifies misconfigured cloud buckets, verifying that your cloud storage solutions are not inadvertently exposing private data to the public internet. The Exposure Scan also looks for other common misconfigurations like unprotected .git folders, forgotten development files, or publicly accessible .env files. By simulating an attacker's reconnaissance efforts, FortifyNet provides a comprehensive overview of your external attack surface, allowing you to proactively patch vulnerabilities before they are discovered and exploited.
Compliance
Regulatory Framework Check
In an era of increasing digital regulation, maintaining website compliance is paramount for businesses worldwide. FortifyNet's Compliance Scan provides a comprehensive assessment against key regulatory frameworks, helping you navigate complex legal requirements like GDPR, NIS2, and the AI Act. Our scanner meticulously analyzes your website for common compliance pitfalls, focusing on how user data is collected, processed, and protected. For GDPR, we identify the presence of cookie consent mechanisms, privacy policies, and verify data handling practices to ensure they meet strict EU standards. The scan also assesses adherence to NIS2 (Network and Information Security Directive 2) requirements, particularly for critical entities, examining aspects related to supply chain security and incident reporting capabilities. With the emergence of the AI Act, FortifyNet helps evaluate potential risks associated with AI systems deployed on your website, focusing on transparency, data governance, and human oversight. We provide detailed reports on cookies found and tracking scripts in use, helping you ensure proper disclosure and consent.
WHOIS / Domain
Domain Intelligence
Understanding your domain's foundational information is crucial for security, management, and strategic planning. FortifyNet's WHOIS / Domain analysis provides an in-depth look into your domain's registration details, offering insights that can prevent hijacking, identify potential threats, and ensure continuous operation. Our scanner queries public WHOIS databases to retrieve vital information about your domain's registrar, revealing who manages your domain registration. We track your domain expiration date, providing crucial reminders to prevent accidental lapses in registration, which can lead to your domain being lost or maliciously acquired. The analysis also identifies your nameservers, confirming that your domain is pointing to the correct DNS providers and that these are securely configured. Beyond basic ownership details, our WHOIS check helps identify discrepancies or suspicious changes that could indicate a domain hijacking attempt. By providing clear visibility into the publicly available data associated with your domain, FortifyNet empowers you to monitor its health, manage its lifecycle effectively, and quickly detect any unauthorized alterations.
Tech Detection
Technology Stack Detection
Knowing the underlying technologies powering your website is essential for both security and competitive analysis. FortifyNet's Technology Detection scan meticulously uncovers your website's digital fingerprint, identifying the various platforms, frameworks, and services in use. This detailed analysis helps you understand your technology stack, assess potential vulnerabilities associated with specific versions, and even benchmark against competitors. We accurately identify your CMS (Content Management System), whether it's WordPress, Drupal, Joomla, or a custom solution, providing insights into common attack vectors for each. The scan also detects your frontend framework (e.g., React, Angular, Vue.js), revealing client-side dependencies that might require security attention. We pinpoint analytics platforms (e.g., Google Analytics, Matomo), ensuring they are correctly implemented and not inadvertently exposing data. Furthermore, our tool identifies your CDN (Content Delivery Network) provider (e.g., Cloudflare, Akamai), which plays a significant role in both performance and security.
