Domain publication
See whether the exact domain publishes an internet address.
Small-practice domain security
See what your public domain records reveal. Free.
Start with three plain-language observations from public DNS records. No account, password, server access, subscription, or payment is required. Then choose the separate $149 monthly Domain Monitor service or a one-time FastTrack technical assessment only if it fits your needs.
Free Exposure Preview
Useful enough to start. Narrow enough to be honest.
We look up records at the exact domain and its standard DMARC label through a public DNS resolver. We do not contact your website, mail server, cloud account, office network, or private systems.
Email routing
See whether public mail-routing records are present.
Email protection
See a plain-language summary of visible SPF and DMARC policy.
Clear limits
No vulnerability verdict, security score, compliance claim, port scan, crawling, or login attempt.
Optional monthly path
Keep an eye on one domain for $149 a month.
Domain Monitor compares public DNS and configuration records once each month, flags important changes found during that review, and provides a short monthly summary. Each additional separately controlled and authorized domain is $99 monthly. The monthly review makes no customer-origin requests and is not a vulnerability scan or penetration test.
1. Start free
Create a fresh Free Exposure Preview for the one domain. The preview never starts billing.
2. Prove control
Verify the same domain using a normal work email, guided DNS TXT record, or one bounded well-known website-file check.
3. Authorize monitoring
Accept a separate written authorization for the exact monthly public-record review.
4. Activate
Reconcile the first $149 monthly payment. Monitoring activates only after every gate is complete and continues until cancelled. This site has no checkout.
Domain Monitor uses no credentials and accepts no PHI. It is not a HIPAA Security Risk Analysis or certification, does not claim the domain is safe, and is cancelled rather than marked complete.
Use your normal work email
Receive a short code at an existing same-domain mailbox. You do not need to create an AlomSec mailbox.
Invite your IT provider
If email is not convenient, use a guided DNS TXT record or well-known website file.
No sudo for basic FastTrack
Domain and Business do not require server credentials. Authenticated testing uses two synthetic test accounts only when that tier is selected.
Written permission stays separate
Domain proof, payment, and a form never authorize testing. The customer signs the exact scope before assessment work begins.
Healthcare boundary
A practical technical first step, not a HIPAA certification.
A one-domain report cannot cover every place electronic protected health information is created, received, stored, or transmitted. FastTrack does not request patient information and does not claim to be a HIPAA Security Risk Analysis.
Start without enterprise overhead
Request the free one-domain preview.
Do not place passwords, access tokens, patient data, customer records, or vulnerability evidence in the public form.
Request the free preview