Every check, explained one by one.
What Specula runs, how each check works behind the scenes, and what lands in your hands when something breaks.
Domains & DNS
4Domain Registration & Tracking
Buy or transfer domains through Specula. Expiry, WHOIS changes, and risk scores in real time.
See the detailDNS Monitoring & Backup
Every change to your NS, MX and IP records is reported; a record that can't be read is never counted as changed. Roll back to any prior state with the point-in-time backup.
See the detailDNS Health Score
One score out of 100 from eight structural checks. If the score drops you're told which check slipped.
See the detailWHOIS Backup & Watch
Every change in ownership records is logged. Catch social engineering attempts early.
See the detailCertificates & encryption
2Attack surface & discovery
5Attack Surface Discovery
Finds the forgotten subdomains, test servers, and shadow assets attached to your brand — see the surface an attacker sees.
See the detailOpen Port Scanning
Continuously maps your attack surface. Alerts the moment an unexpected port opens.
See the detailKnown Exploit Priority
Ranks the vulnerabilities on your server by CISA's “actively exploited” catalogue and FIRST's exploit probability score. Field data decides what to fix first, not the CVSS number.
See the detailDangling DNS References
Do your DNS records point at a name nobody owns any more — and could someone register it and send email as you? Verifies every SPF, MX, NS and CNAME target one by one.
See the detailCloud Storage Discovery
Detects publicly exposed S3 and GCS buckets opened under names close to your brand. It never reads the contents.
See the detailWebsite security
4Source Code & Malware Scanning
Regularly scans your site's source code for injected worms, malicious scripts, and hidden redirect links — and alerts you the moment one appears.
See the detailWordPress Plugin & Theme Vulnerabilities
Builds a plugin and theme inventory from your site's HTML and matches it against 40,000+ vulnerabilities in the Wordfence Intelligence catalogue. A plugin whose version can't be read reliably is never counted as clean.
See the detailHacklink & Gambling Link Detection
Finds gambling links injected into your site, hidden from visitors or shown only to Googlebot. Being hidden is not an accusation on its own.
See the detailSoftware Hygiene
Flags the end-of-support date for every version detected on your site, and JavaScript libraries with known vulnerabilities. If no release cycle is found it says unknown, not supported.
See the detailProtection & response
3Blocked Requests
Collects the attack attempts Cloudflare blocked on your site and makes them readable: which path, which country, which tool.
See the detailScript Threat Signals
Flags the third-party scripts your site loads that appear on threat lists — the first signal of a script slipping into your checkout page. No flag does not mean clean.
See the detailTimed Attack Mode
Turn on Cloudflare's “Under Attack” mode in one click when you need it — but on a timer. After 1, 6 or 24 hours it returns to your previous level on its own.
See the detailEmail security
2Reputation & brand
5Typosquat Detection
Generates and scans domains that imitate yours, and separates freshly registered impostors from years-old noise.
See the detailBlocklist & Reputation Check
Is your domain flagged on national or international malicious lists? Records that merely imitate your brand are counted separately, never as your finding.
See the detailIP Block Reputation Audit
Checks every address in your /24 against 19 blocklists. An address's own behaviour is never counted together with your provider's network record.
See the detailFake App Detection
Finds mobile apps carrying your brand name in the app stores. Official or impostor — that call stays yours.
See the detailBrand Monitoring
Tracks where your brand comes up in news, forums, and communities. Catch the conversation early, not late.
See the detailLeaks & threat intelligence
3Data Leak Detection
Continuously searches trusted breach sources for credentials tied to your domain, lists every match per domain, and alerts your team the moment a new one surfaces.
See the detailGitHub Secret Leaks
Searches for your domain inside .env files committed by mistake, and tells templates apart from real leaks.
See the detailLeaked-Credential Login Attempts
Shows how many attempts were made against your login pages using a password already exposed in a breach. Thirty days, day by day.
See the detailAvailability
2Uptime Monitoring
Checks every five minutes from our single European vantage point. Your team is alerted within seconds of a confirmed outage, and every failure is re-verified before we page you.
See the detailStatus Page
Publish a public status page for your customers: a day-by-day availability strip, incident history, your own logo and your own domain.
See the detailVisibility & reporting
5Security Score
Your whole portfolio's security posture as one score — with the number of checks actually measured printed beside it.
See the detailAnomaly Detection
Response time, certificate, and DNS changes are evaluated against rules you define. When a limit is crossed, you see it together with whatever else changed at the same time.
See the detailMonthly Security Report
A PDF summary of your portfolio lands in your inbox every month, compared against the one before it.
See the detailCompliance Evidence (KVKK · ISO 27001)
Produces a dated evidence pack for audit. It never says "you are compliant" — it states what was measured and what wasn't.
See the detailAI Visibility
How does your site look to AI search engines? Measures crawler access and how readable your content is to them.
See the detailManagement & integrations
5Cloudflare Integration
Connect your Cloudflare account and apply fixes like HSTS and security headers from the console in one click.
See the detailCloudflare Account Audit
Audits your connected account: whose two-factor is off, who changed what in the dashboard and when, and where you stand against your WAF quota.
See the detailsecurity.txt Publishing
Publish how security researchers should reach you, in RFC 9116 form — at the Cloudflare edge, without placing a single file on your server.
See the detailTeam, Roles & Audit Log
Give each teammate exactly the access their role needs. Who changed what, and when, is recorded in the audit log.
See the detailApproval Workflows
DNS, SSL, and domain changes wait for approval before they go live. Accidental changes stop being a category of incident.
See the detailComing soon
2Managed DNS
For teams without their own DNS infrastructure: hand your domain's DNS over to Specula in one flow — ownership verification, a migration plan, records written for you, and a backup you can roll back to at any point. Not open yet; we'll announce it here when it is.
Hosted MTA-STS
Let Specula publish the MTA-STS policy that forces your mail to travel encrypted — without placing a file on your own web server, certificate included. Currently in testing on a limited number of accounts.
Run this check on your own domain.
Add a domain and Specula finishes the first scan within minutes. No credit card needed.