Short answers about what we measure, how we do it, how we can help, and the rights you have over the barometer and our scanner.
Every check produces three scores out of 100: compliance (visible configuration and good practices), resistance (to known weaknesses detectable from the outside) and speed (perceived performance). We always measure from the outside, the way any visitor would. See how we test.
The website check looks at configuration, known vulnerabilities and speed from the outside. The server check adds the exposed services and the hosting setup. The e-mail check verifies SPF, DKIM and DMARC, so your mail is trusted and harder to spoof. The message check (SMS, WhatsApp, social networks) follows the links to see if they are dangerous. Each one gives a clear score and what to improve.
No. By default we read only what a visitor already sees: the home page, the response headers, the TLS certificate and the public DNS records. We never log in, never send a password or any attack payload, and never change anything.
A deeper, « borderline » check — sensitive files, hidden paths, administration ports — runs only for an owner who has proven the domain is theirs and has explicitly authorised it. More about our scanner.
No. The robot changes nothing and writes nothing, it respects rate limits and backs off if your server asks it to. It identifies itself as TopSecuredScanner and comes from recognisable addresses whose reverse DNS ends in .top-secured.com.
We measure a large panel of websites and publish aggregated statistics with an honour roll. Only good results are named: a weakness is never shown next to a name. Measurement runs continuously and we publish a fresh « snapshot » every week. Read the method.
Use the join the panel form. You accept that your site is measured from the outside and that aggregated results may be published — your organisation may be named for a good result, never for a weakness. You can leave at any time.
You can ask to be removed; for a removal by name we check that you control the domain (a DNS TXT record). To dispute a score, use the contest a result form and we look again.
Tell us with the form on the scanner page: it covers a domain, an IP address or a whole network, and we apply it within 72 hours. You can also block TopSecuredScanner yourself in your robots.txt or at your firewall — we fully respect it.
Yes — that is what we do. A detailed report tells you exactly what to fix (our reports), our experts can fix it for you (expert services), and we can keep watch over your site over time (monitoring). You are never obliged to buy anything to know where you stand.
Beyond a one-off fix, managed services mean we look after your server and site over time: monitoring, updates and hardening, and a human to call when something breaks. We can also simply keep watch and warn you, or review your setup and advise. We scale it to what you actually need.