ClickScan — Security checks anyone can run,
in plain language.

Assets & proven ownership

Keep an inventory of the domains, IP addresses and mailboxes you watch — imported and exported as CSV, with related addresses nested under the domain they belong to. For the deeper checks we ask you to prove an asset is yours, in whichever way suits it: a DNS TXT record, a file at /.well-known/, a code emailed to an address at the domain, a callback from the IP itself, or reverse DNS.

Groups & teams

Create organizations to group assets by client, project or brand, invite teammates with roles, and share assets, scans and reports. An owner can also let a member run scans on the owner's credits, for that organization's assets only. Included by default.

On demand, booked, or recurring

Run a check now, book it for a date and time in the time zone you pick, or repeat it daily, weekly or monthly — recurring runs are discounted, so continuous monitoring stays cheap. If a scheduled run can't be paid for, you're told; the schedule stays active.

Whole estate in one go

Select many assets and many checks at once and the wizard collects only what each one needs, skips the pairs that don't apply, and shows the total cost before you spend a credit.

Plain-language reports, with the evidence

Every scan gets an A+–F grade, a line saying which finding drove that grade, and "what you have / how bad it is / what to do" findings — each marked with how we know, whether we proved it or read it from a published record. Underneath sit the cipher tables, raw DNS answers and per-weakness verdicts for whoever wants them. PDF export for one scan, or one report covering every check on an asset, as an executive summary or in full.

Feed it to your own tools

Lookalike findings download as a STIX 2.1 bundle or as YARA rules — for the whole scan, or for one domain in the shape you want: the name, its URLs, or its addresses. Built when you ask rather than stored, so a download is always the report as it stands.

What goes in is deliberately narrower than what the report shows. A parked domain, another company's legitimate brand protection, a finding we could not confirm, and anything you have told us is yours are all left out — an indicator lands in a blocklist with nobody in the loop, so exporting the wrong one is a harm we would be causing rather than reporting. Confidence is never 100: a live, mail-capable lookalike is the shape of a phishing setup, not a delivered phish.

What changed since last time

Each scan is compared with the previous one for the same asset and check, and you're told only when something actually moved — leading with what got worse and naming it, rather than sending you an identical notice every morning.

It also says when it cannot tell, instead of guessing. If we widen or narrow the list of lookalike names we sweep for, some of them stop being looked for at all — and a comparison that did not know that would report a domain which is still registered, still serving a site and still able to receive mail as having been fixed.

Mark a finding as not applicable

"We know that header is missing — that host is internal and never faces the web." Hide a finding on one asset with a reason on the record. It always expires, it never changes the grade, and it's hidden rather than deleted — so the report you hand a client is still the truth.

One thing does move the grade, and it is a different act. If a domain we flagged as impersonating you is yours — a subsidiary, a second brand, a defensive registration we could not recognise — say so, and we stop treating it as an impersonation. Hiding a finding says the check was right and it does not matter to you; this says the check was wrong. Withdrawing it moves the grade back.

Your brand on the report

Consultants and agencies can put their own logo and colour on the PDFs, per workspace. Submissions are reviewed before they go live, and the contrast is adjusted so a report is always readable.

Alerts & notifications

Told before a TLS certificate expires — at 30, 7 and 1 day, and again if it lapses — when a scan finishes or fails, when something changed, and when a scheduled run was skipped because credits ran out. In the app and by email.

One view of your exposure

A dashboard that answers the questions worth asking: which assets are worst, how many open findings and how serious, how much of what you own has actually been checked, and whether your grades are getting better or worse over time.

Pay as you go

Buy credits, spend them on the scans you actually run. No seats, no subscription, no lock-in. A scan that fails is refunded, and so is one that found nothing to test. Recurring runs are discounted, and referrals earn credits for both sides.

No passwords, and your data is yours

Sign in with a one-time code sent to your email — there is no password to steal, reuse or reset. Reading everything the platform found is always free; only taking it out as a file needs a paid account. You can close your account yourself, from inside the app.