SFY Domain Security Scanner
Is Your Business Exposed?
Attackers only need one way in. See where yours is, free, in 10 seconds.
- From the Okanagan, for Canadian businesses
- Always free
- Zero spam, ever
What Hackers Actually Do
These are the attacks hitting Canadian businesses this year. Your free scan checks whether each one has a clear path into your domain.
A Hacker Sends Invoices in Your Name
Without the right email protections in place, an attacker can send invoices that look like they came from your domain. Your clients pay them. Invoice fraud costs Canadian SMBs an average of $47K per incident. We check whether this path is open right now.
- From
- Accounts <billing@yourcompany.ca>
- To
- payables@yourclient.ca
- Subject
- Updated banking details, invoice 4471
Hi, our bank has changed. Please send this month's payment to the new account below so it isn't delayed.
Credentials for Sale on the Dark Web
Old breaches don't stay buried. Employee logins get resold on underground markets. We check your domain against billions of leaked records so you know what attackers already have.
- j••••@yourcompany.ca••••••k2Combolist, 2024
- s••••@yourcompany.ca•••••19!Stealer log, 2023
- m••••@yourcompany.ca••••••ayForum dump, 2022
Admin Panels Left Open to the Internet
The full report sweeps your public-facing network for exposed admin logins, remote access doors, and forgotten services sitting online. We find them before an attacker does.
- 3389Remote desktop loginExposed
- 8443Admin control panelExposed
- 21Old file transfer serverExposed
- 443Your websiteExpected
Questions we hear a lot
Answered in plain language. No IT degree required.
No. This is a read-only external scan. We check what's publicly visible from the internet, the same way an attacker would. We never touch your DNS, your mail settings, or anything inside your network.
Yes, genuinely free. We run this scan because every Canadian business should know their external risk before an attacker finds it. If you want help fixing anything, that's where our paid services come in.
No technical background required. Your score is 0–10, with plain-language explanations. The emailed PDF is written for owners and managers, not IT teams. Your IT team will find it useful too.
Completely safe. The scan is passive and external. We read public records (DNS, certificates, headers) the same way a visitor's browser does. No load is placed on your website.
Low scores are common and fixable. The emailed report includes a prioritized fix list. Most issues can be resolved by your IT provider in under an hour. We can also help.