FROM CHECKS TO CONTINUOUS IMPROVEMENT
Security work that remembers what comes next.
Analyze evidence, assign work, rehearse recovery and keep verified public signals in one privacy-aware workspace.
01 · SECURITY ACTION PLAN
Turn findings into owned, dated work.
Tasks stay on this device. Import suggested actions from your latest Control Room snapshot or create your own evidence-ready plan.
Today
07 days
030 days
002 · DMARC REPORT INTELLIGENCE
See who is sending mail as your domain.
Open a DMARC aggregate XML, GZIP or ZIP report locally. The report is parsed in this browser and is never uploaded.
Choose or drop one DMARC aggregate report
Maximum 5 MB compressed · 15 MB extracted
—
—
Sending sources
A failing source is not automatically malicious. Confirm every legitimate sender before tightening the DMARC policy.
03 · EXTERNAL CHANGE RADAR
Detect drift before it becomes an outage.
The existing DNS-verified monitor now compares daily snapshots and records exactly which public layer changed.
Certificate change
Fingerprint, expiry and trust state.
Header drift
HSTS · CSP · nosniff · Referrer · Permissions
Authentication drift
SPF · DKIM · DMARC · MTA-STS · TLS-RPT
Nameserver change
Authoritative server set and resilience.
Lifecycle change
Expiry, registrar and registry status.
Your computer does not need to stay on.
Use the existing platform-maintenance cron. Once DNS ownership is verified, each daily result is compared with the previous one and meaningful changes trigger email.
04 · BACKUP RECOVERY DRILL
A backup is trusted only after a restore.
Set recovery objectives, run a timed rehearsal and keep a local evidence record without touching production automatically.
Drill clock 00:00
Last five recovery exercises
05 · VENDOR SECURITY CENTER
Know which supplier holds your greatest exposure.
Create a private, device-local register for hosting, email, cloud, payments and other critical providers.
06 · VERIFIED SECURITY PROFILE
Share evidence without claiming perfection.
After DNS ownership verification, publish an optional private-link profile that contains only scope, dates, score and public check results.
- 01Create domain monitoring
- 02Verify ownership with DNS TXT
- 03Enable the public profile from the private management page
- 04Copy the high-entropy share link
Email address, management token and raw DNS values are never included in the public view.
