FREE · NO EMAIL
Public domain score
Fourteen bounded public reads, seven scored components, the complete returned fact ledger, findings, unknowns, and a downloadable PDF. It remains free and ungated.
Run the public score →35 COLLECTORS · 123 FINDING TYPES
The public score opens the question. The full review prepares the operator.
The free score shows the bounded configuration evidence anyone can observe from outside. The full SCOUTz Domain Review runs 35 collectors and can produce 123 distinct finding types on the public domain layer for the MSP preparing the next conversation.
FULL DOMAIN REVIEW
Operator depth for the MSP
Collectors run: 35. Distinct findings they can produce: 123. The review covers DNS, mail, web, certificates, public exposure, technology, provider, brand, and business context. Each source keeps its timestamp, state, and evidence boundary. With customer-approved read-only cloud access, the roster becomes 92 collectors and 370 reachable finding types, including the full public-domain roster.
Different artifact. Different ask.
The free score is a courtesy result anyone can inspect and download. The full Domain Review is a separate operator artifact intended for an MSP deciding whether a deeper conversation is useful. Requesting it does not authorize tenant access, active testing, or a production change.
Every conclusion comes with the record it rests on. The evidence page keeps the published configuration separate from findings and states only what was read. Every check reports verified working, needs attention, worth noting, or could not be read, so unread evidence is never mistaken for a pass. Correlated findings can identify an open route, such as invoice impersonation, without probing, simulating, or exploiting anything.
EVIDENCE · INSIGHT · PROOF
What a domain alone tells you, before the first call.
01
Email authentication
Published SPF, DKIM and DMARC evidence.
02
DNS and certificates
Selected published configuration and records.
03
External surface
Supported public observations, with their dates and limits.
04
Inside the tenant
Not established by public evidence. Ask for approved read-only access.
EVIDENCE · INSIGHT · PROOF
What you can know before they let you in, and after.
01
Before consent
Published domain, DNS, email authentication, certificates and external evidence.
02
With read-only consent
Supported Microsoft 365 identity, app, permission, licensing and configuration evidence.
03
Never inferred
No message bodies, private files, chats or prompts. Unread is not clean.
Your next prospect meeting is already on the calendar.
Bring dated evidence, clear limits, and useful questions.