Check your external attack surface — free.
Matproof scans your domain for commonly exploited weaknesses and emails you a prioritized report within 24 hours. No contract, no catch.
What we check
External attack surface
Public services, DNS, TLS/SSL, security headers, known CVEs.
Typical misconfigurations
Open ports, missing DMARC/SPF, expired certs, insecure redirects.
Concrete recommendations
Prioritized report with remediation steps — directly actionable.
Frequently asked questions
What exactly do you check?
External attack surface: DNS, TLS/SSL, security headers, publicly reachable services, known CVEs, typical misconfigurations. Non-invasive and does not touch production systems.
Is this actually free?
Yes. No contract, no hidden cost. You get a prioritized security report and decide afterwards whether to engage Matproof further.
How fast will I get the result?
Within 24 hours, by email.
Does this replace a full pentest?
No. The check is an external snapshot. For NIS2, ISO 27001, or DORA audits you need a full pentest. Matproof offers that as Pentest-as-a-Service.