Check 50 of 54 · Attack surface
Signals in your results that bear on Cyber Essentials, NIS2 and the ISO standard for information security.
Engine 1.57.0, read 25 October 2026
What have you left open to the internet?
The scan's own results. Cyber Essentials has two signals: high-risk services or vulnerabilities a public index lists for your website, and out-of-date software named in your server's headers. The ISO standard for information security has three, among them DMARC and clickjacking protection. NIS2 has six, among them DMARC, encryption and the code your home page loads. A signal the scan could not assess is not counted as in place.
If you are working towards one of these frameworks, it shows how many of the signals relevant to it are in place.
It is context: background only. It is never graded, so nothing it finds lowers your score.
Information only, and never scored. It is not an assessment against any of these frameworks: each covers controls an outside scan cannot see.
Check 50 is one of 5 in Attack surface. See it in its row on the scanner page, beside the rest of Attack surface.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.