For UK small organisations

Run the free NCSC checks. Then keep watching.

If you run a UK small business, charity, or school, the National Cyber Security Centre offers genuinely good free tools — and we think you should use them. This page explains what they cover, and what to put in place for the day after the snapshot.

Start here: the NCSC's free tools

The NCSC's Check Your Cyber Security service runs government-backed checks on your email security and browser, with no sign-up. Its Email Security Check looks at whether your domain's email could be spoofed or intercepted. They are free, trustworthy, and take minutes — if you do nothing else today, run them.

What a snapshot can't do

Those tools are deliberately one-off snapshots. They tell you where you stand at the moment you click — but your certificate will renew (or fail to), your DNS will change, a subdomain will be forgotten, a provider will alter a default, and a lookalike domain can be registered against your brand at any moment. None of that sends you back to a check page.

The unglamorous truth about staying secure is that it's a habit, not an audit. Most of the incidents that hurt small organisations come from things that changed after the last time anyone looked.

Where MyDomainRisk picks up

  • Wider coverage — 50+ external checks across certificates, email authentication, exposed services, web security headers, domain hygiene, lookalike domains, cloud storage exposure, and threat-intelligence feeds.
  • Continuous watch — scheduled rescans with alerts when something gets worse, so changes find you instead of waiting to be found.
  • History and progress — a score you can track over time and show to a board, an insurer, or an auditor.
  • Fix paths, not jargon — every finding explained in plain English with practical steps, prioritised so you know what to do first.

Like the NCSC tools, every MyDomainRisk check is external and non-intrusive: nothing is installed, no credentials are used, and nothing touches your systems beyond what any visitor on the internet could already observe.

A sensible free routine

  1. Run the NCSC's Check Your Cyber Security tools today.
  2. Run a free MyDomainRisk scan of your domain — the instant check on our homepage needs no account.
  3. Fix the highest-priority findings from both.
  4. Put your domain on the Free plan (5 domains, no card) so you have a baseline and history — upgrade only if you need scheduling, alerts, and reports.

Why we link to a free government alternative: because it makes people safer, and that's the point. If the snapshot alone is all you need, use it with our blessing. If you want someone watching the gaps between snapshots, that's what we're for.

Start free — 5 domains, no card