Is your website and email safe?

Type your website address. In about twenty seconds you get a plain report. Is your padlock working? Can someone send email pretending to be you? Have any private files been left out on show? It's free, and there's nothing to install.

Free, and limited to a few checks an hour so it stays fast for everyone. What we check, and what we keep.

Then keep it that way

Stop people faking your email

Anyone can send an email that claims to be from you, unless a setting on your domain says otherwise. That setting is called DMARC. Every day, the big email providers report who is sending email as you. We read those reports for you, put them on one private page, and tell you when something new starts failing. Over time, that lets you safely tell inboxes to block the fakes.

Opening soon. Join the waitlist and we'll write when it starts.

How DMARC monitoring works

Never get caught out by an expiry

If your website's padlock expires, every visitor sees a warning. If your domain name expires, your website and your email stop working. We check up to five of your domains every day and email you before either runs out: 7, 3 and 1 days before for the padlock, and 30, 14, 7 and 1 days before for the domain name.

Free. We only email when something is due.

Watch my domains

How a fix works

  1. Run the free check. Anything amber or red has an Ask us to fix this button.
  2. Press it and tell us how to reach you. We email you a price and a plan. You don't pay anything on this site.
  3. We make the change with you, run the check again together, and you keep the before-and-after report.
For your IT person

The check reads public DNS records (MX, SPF, DKIM, DMARC, DNSSEC, CAA), the TLS certificate and the TLS versions offered, the home page's security headers and cookie flags, five common leftover paths and /.well-known/security.txt. Fixes are made in your DNS, hosting or mail settings. The DMARC page has the reporting setup; the expiry watch reads the certificate on port 443 and the registration date the registry publishes over RDAP. The full list is on the website & email check page.

Talk to a person

These services are run by little jamjar in the UK. Email hello@littlejamjar.com. Replies within two working days.