What is a Cyber Risk Snapshot?

A Cyber Risk Snapshot is a free OSINT-only surface scan of your website. It checks 8 risk areas — SSL/TLS health, security headers, email spoofing exposure (SPF/DMARC), exposed sensitive paths, DNS health, cookie flags, server information leakage, and discoverability risks. No credentials required, no exploitation, no impact on your live site.

Is this free website security scan safe to run?

Yes — 100% safe. The scan is OSINT-only, meaning we only look at publicly available information. We do not send any attack traffic, do not access your server, and do not require login credentials. Everything we check is visible to any internet user.

How long does the cyber risk scan take?

The snapshot takes approximately 60 seconds to complete. Results are displayed on-screen immediately. You can also choose to receive a summary by email for your records.

What does the free security scan check?

The scan checks 8 areas: (1) DNS & domain health, (2) SSL/TLS certificate validity and expiry, (3) HTTP security headers (HSTS, CSP, X-Frame-Options), (4) email spoofing risk via SPF and DMARC records, (5) exposed sensitive paths (.env, .git, admin panels), (6) server information leakage, (7) cookie security flags, and (8) discoverability risks in robots.txt.

Is this suitable for Singapore SMEs?

Yes — this tool was built specifically for Singapore SMEs. Most small businesses in Singapore have never had a security check. This snapshot gives you an immediate picture of your risk exposure at zero cost, with no technical knowledge required.

What happens after the snapshot?

You get an on-screen report with a risk rating for each area. If you want to go deeper — code audits, cloud posture reviews, or full VAPT — CodeHunters offers productized cybersecurity tiers starting from S$2,500. We'll only recommend a paid engagement if the snapshot shows genuine risk.

Free Cyber Risk Snapshot

See What Hackers See — In 60 Seconds

Enter your website URL and we'll run an OSINT-only surface scan — no credentials needed, no exploitation, no spam. Get an instant on-screen report covering DNS, SSL, security headers, exposed paths, and email spoofing risk.

Run Your Free Snapshot

Takes about 60 seconds. We'll show the report on this page and email you a summary if you'd like a follow-up.

Website URL *

Your Name *

Business Email *

Company Name *

WhatsApp / Phone *

OSINT-only No credentials needed ~60 seconds PDPA-compliant

Your report will appear here

We'll check DNS records, SSL/TLS health, HTTP security headers, common exposed paths, email spoofing risk, and information leakage — all from public sources.

What We Check

Eight Surface-Level Risk Areas

DNS & Domain

A, AAAA, MX, NS records and resolution health.

SSL / TLS

Certificate validity, issuer, expiry window.

Security Headers

HSTS, CSP, X-Frame-Options, Referrer, Permissions.

Email Spoofing

SPF and DMARC posture for your domain.

Exposed Paths

.env, .git, phpinfo, server-status, admin panels.

Info Leakage

Server, X-Powered-By and version disclosure.

Cookie Flags

Secure, HttpOnly, SameSite on all cookies.

Discoverability

robots.txt hints and sensitive path leaks.

Need deeper coverage — code audits, cloud posture, full VAPT? See our productized cybersecurity tiers →