Is Your Email in a Data Breach?
Your domain security is only part of the picture. KandiCare Sentinel checks whether your email address or phone number has appeared in a known data breach — free, no account required, results in seconds.
Run Free Breach CheckNo account · No email required · Results in seconds
Frequently Asked Questions
What is DKIM and why does it matter? ›
DKIM (DomainKeys Identified Mail) is an email authentication method that uses cryptographic signatures to verify that an email was sent from your domain and was not altered in transit. When you send an email, your mail server adds a digital signature using a private key. The receiving server looks up the corresponding public key in your DNS records and verifies the signature. Without DKIM, attackers can forge email from your domain or modify messages in transit without detection. DKIM is one of the three pillars of email authentication alongside SPF and DMARC.
What are security headers? ›
Security headers are HTTP response headers that your web server sends to browsers to instruct them on how to handle your content securely. Content-Security-Policy (CSP) tells the browser which scripts and resources are allowed to load — preventing cross-site scripting attacks. X-Frame-Options prevents your site from being embedded in iframes on other domains, stopping clickjacking. X-Content-Type-Options prevents MIME-sniffing attacks. Referrer-Policy controls what URL information is sent when users click links. Permissions-Policy restricts which browser APIs (camera, microphone, geolocation) a page can access. Missing security headers are one of the most common and easily fixable vulnerabilities found in website security audits.
How often should I scan my domain? ›
You should scan any time you make infrastructure changes — new server deployment, hosting provider change, SSL certificate renewal, or DNS record updates. For ongoing assurance, a monthly manual scan is a reasonable baseline for small businesses. Security configurations can change unexpectedly due to provider updates, certificate expiry, or accidental misconfiguration — which is why automated daily monitoring (like KandiCare Watch) catches problems before your customers or attackers do.