Website security scan
A website security scan built for UAE businesses
Wraith runs a controlled, external security assessment of a domain you own and are authorized to assess — covering DNS, email authentication, TLS, HTTP headers, and what's publicly discoverable about your infrastructure.
$9.00 one-time · no subscription
What a website security scan checks
Wraith examines five areas from the public internet, the same way a browser or a mail server would: DNS resolution and mail routing, the SPF, DKIM and DMARC records that let mail be authenticated, the TLS certificate and protocol versions your site negotiates, the HTTP security headers your server sends, and hostnames publicly recorded for your domain in certificate-transparency logs.
What it does not do
Wraith does not attempt exploitation, port scanning, password guessing, or authenticated testing of any kind. It is not a penetration test and does not simulate an attacker — it reports on published configuration only. A clean result means these specific checks found nothing at the time they ran, not proof that a system is secure.
Ownership verification, every time
Before any assessment runs, you prove control of the domain by publishing a DNS TXT record Wraith generates for you. No domain is assessed without that proof — there is no way to scan a domain you do not control.
One assessment, one report
Payment is a single, one-time charge — there is no subscription. Once your domain is verified and paid for, the assessment runs and a branded PDF report is emailed to you: a security score, findings ranked by severity, and a plain-language recommendation for each one.