Security, in plain English

Seeing dmarc=fail in your email headers? This guide covers the five most common causes — alignment, missing SPF/DKIM, p=none policy and forwarding — with exact DNS fixes.

Test whether SPF, DKIM and DMARC are configured correctly — without sending a test email. Three free methods: raw headers in Gmail, command-line dig, and an instant live scan.

Run through 12 domain security checks — SPF, DKIM, DMARC, DNSSEC, CAA, HTTPS, security headers and more — to find and fix gaps before attackers do. Free scan included.

WordPress fails email authentication by default. This guide fixes SPF, DKIM and DMARC for WooCommerce, contact forms and SMTP plugins — with a free scan to verify each record.

Phishing causes over 90% of data breaches. These 8 steps — email authentication, MFA, DNS filtering and staff training — cut your exposure without enterprise budgets.

Mixed content breaks your HTTPS padlock and fails security scans. This guide shows how to find every HTTP resource on your site and fix it — for WordPress, custom sites and CDNs.

A practical website security checklist covering HTTPS, email authentication, DNS, exposed files, security headers and more. Use it to audit your site in under an hour.

DNSSEC protects your domain from DNS cache poisoning and spoofing. This guide explains how to enable it at your registrar or DNS provider in under 15 minutes.

SSL certificate errors stop visitors in their tracks. This guide covers every common SSL error — NET::ERR_CERT_DATE_INVALID, ERR_CERT_AUTHORITY_INVALID, mixed content and more — with exact steps to fix each one.

Subdomain takeover lets attackers serve content under your domain by claiming an abandoned cloud resource. Learn how to detect dangling DNS records and remove them before someone else does.