Security Report Card

year: 2026
stack: python
status: shipped

Grades a domain A to F from passive checks: TLS, headers, SPF and DMARC, leaked secrets.

problem

Most people can't tell whether their domain is set up safely without running a dozen tools.

built

A Python CLI and web UI that grade a domain from A to F using passive checks only: TLS, security headers, SPF and DMARC, and leaked secrets. 22 tests.[9]

web-ui.png

Security Report Card web UI showing a domain's grade and the checks behind it.

web-ui-grade-c.png

A report graded C, with the failing checks listed.