Domain publication
See whether the exact domain publishes an internet address.
Small-practice domain security
Run a free DNS record check for your domain.
Start with three plain-language observations from your public DNS records. It takes an email address and nothing else. If it is useful, Domain Monitor watches those records for $149 a month, and a FastTrack report goes deeper for a one-time fee.
Free domain check
What the free check shows
We read the public records for your domain, the same ones anyone on the internet can see. Nothing we do touches your own systems.
Email routing
See whether public mail-routing records are present.
Email protection
See a plain-language summary of visible SPF and DMARC policy.
Clear limits
No vulnerability verdict, security score, compliance claim; port scan, crawling, or login attempt.
Optional monthly path
Keep an eye on one domain for $149 a month.
Domain Monitor compares public DNS and configuration records once each month, flags important changes found during that review, and provides a short monthly summary. Each additional separately controlled and authorized domain is $99 monthly. The monthly review makes no customer-origin requests and is not a vulnerability scan or penetration test.
1. Start free
Run a new DNS record check for the domain at no charge.
2. Prove control
Verify the same domain using a normal work email, guided DNS TXT record, or a single check of a well-known website file.
3. Authorize monitoring
Accept a separate written authorization for the exact monthly public-record review.
4. Activate
Pay the first $149 invoice. Monitoring starts once payment clears and runs month to month until you cancel.
Domain Monitor reads public records only; no login, and nothing to do with patient data. A HIPAA Security Risk Analysis is a separate, broader exercise that covers every place ePHI is created, stored or sent.
Use your normal work email
A short code goes to an existing same-domain mailbox; a separate KernelHawk mailbox is unnecessary.
Confirm control another way
If email is not convenient, use a guided DNS TXT record or well-known website file.
No server access needed
Domain and Business do not require server credentials. Authenticated testing uses two test accounts only when that tier is selected.
Written permission stays separate
Proving the domain, paying, and filling in a form are three separate things from authorizing a test. Testing starts when you sign the scope.
Healthcare boundary
Healthcare-specific limits
A HIPAA Security Risk Analysis has to cover every place ePHI is created, received, stored or sent. A one-domain report covers one domain. If you need the full analysis, that is a separate engagement — ask and we will scope it.
Start with one domain
Request the free domain check.
Do not place passwords, access tokens, patient data, customer records, or vulnerability evidence in the public form.
Request the free domain check