Could someone send email pretending to be your business?
Nightkeep grades your email security, website certificate, and domain from A to F, and tells you in plain English what to fix. Your first report is free.
No credit card. Nothing to install.
yourbusiness.com
- Email spoofing protection Nothing stops scammers from sending email that looks like it came from you.
- Website security certificate Your security certificate expires in 12 days.
- Domain registration Your domain name is good for another 214 days.
What the report checks
Everything comes from public records about your domain, the same things a scammer or a browser can see.
- Email spoofing
- Whether your domain has SPF, DMARC, and DKIM set up, the records that stop other people from sending email as you.
- Website certificate
- Whether visitors get a secure connection or a browser warning, and how many days until your certificate expires.
- Domain registration
- When your domain name expires, so your website and email don't go dark because a renewal slipped.
- Website availability
- Whether your site is online, sends visitors to the secure version, and loads in a reasonable time.
How it works
-
Create an account
Enter your business name and email, and add your website. Every login is protected with two-factor authentication.
-
Get your free report
In about ten seconds you'll have a letter grade and a list of what's working, what isn't, and how to fix it.
-
Turn on daily monitoring
Subscribe and verify you own your domain with one DNS record. We check every day and email you when something new goes wrong.
Plans
Every account starts with one free report, no credit card. Pick a plan when you want us watching around the clock.
| Feature | Starter$39/month | RecommendedBusiness$99/month | Complete$249/month |
|---|---|---|---|
| Domains | 1 | 5 | Unlimited |
| Team members | Just you | Up to 10 people | Unlimited |
| Automatic checks | Daily | Daily | Every 6 hours |
| Email alerts only when something new goes wrong | Yes | Yes | Yes |
| Run a check any time | Yes | Yes | Yes |
| Microsoft 365 and Google Workspace checks: who has MFA, administrators, guests, inactive accounts* | – | Yes | Yes |
| Cyber insurance summary (PDF) for your application | – | Yes | Yes |
| Monthly report card email | – | Yes | Yes |
| Alerts to several people | – | Yes | Yes |
| Report history | 90 days | 1 year | Full history |
| Start free | Start free | Start free |
* Checking each person's MFA and sign-in activity in Microsoft 365 needs Microsoft 365 Business Premium (or another plan that includes Microsoft Entra ID P1). The other Microsoft 365 checks work on any business plan.
Questions
Is the first report really free?
Yes. Every account gets one free report, and you don't need a credit card to create an account.
Do you need access to my computers or email?
No. The report uses only public information: your domain's DNS records, your website's security certificate, and your domain registration. Nothing is installed and nothing logs in to your systems.
Why do I have to verify my domain?
Daily monitoring only runs on domains you prove you own. You add one TXT record to your DNS, which takes a couple of minutes and doesn't affect your website or email. The app gives you the exact record and step-by-step instructions.
What happens when something changes?
On any plan, we check your verified domains automatically (daily, or every 6 hours on Complete) and email you only when a new problem appears, like a certificate about to expire or an email protection record that was removed. You won't get the same alert every day.
How is my account protected?
Two-factor authentication is required on every login, not just offered. You choose a passkey (Face ID, Touch ID, Windows Hello, or a security key), an authenticator app, or an email code.
Do the Microsoft 365 and Google Workspace checks read our email?
No. On the Business and Complete plans, an administrator grants read-only access to your account settings. We see who has MFA, who has administrator rights, outside guests, and accounts that haven't been used in 60 days. We never read email or files, and we never change anything. We only connect accounts for a domain you've verified.
What if my report shows problems I can't fix myself?
Each finding says what to do in plain English, and most fixes are a quick change with your email provider, web host, or domain registrar. If you'd rather have it handled for you, V.I.P. Solutions, LLC can fix the issues.
Find out where your business stands.
It takes a couple of minutes to sign up, and the first report is on us.