Skip to content
NextITNextIT
Platform

Domain security scan

Confirm ownership of your domain by email, then see each domain’s overall posture, open findings and last check date on the Domains page.

Find out if your business is exposed

Key capabilities

  • Domain & email exposure scan, continuous
  • Vulnerability alerts, prioritized
  • Overall posture score from 0 to 100 with a tier

Learn more

Open the feature pageFind out if your business is exposedAsk your AI assistantUse this feature from ChatGPT, Claude or any MCP client.

Find out if your business is exposed

Enter your domain and confirm ownership by email. NextIT scans your domain and email exposure, then gives you your free security posture & compliance report.

Security posture78/100
Domain & email exposure scanContinuous
Vulnerability alertsPrioritized
Overall security posture score0–100 + tier
Exposed web applicationHigh
Users without MFAHigh

Domains

What this module is for

The Domains page lists the web domains your company owns. For each domain, you see its overall posture, its open findings and the date of its last check. Use the page to keep every domain under watch in one place.

Before you start

  • Open Domains from the Privacy & Compliance panel. The panel opens from the Software and Domains pages.
  • Admins and Users add, edit, delete and check domains. An Auditor reviews the list and the results.
  • Only an Admin can import or export a CSV file. A CSV file is a spreadsheet saved as plain text.

Add, edit and import domains

Select Add domain, enter the domain and save it. To change a domain, select Edit.

To add many domains, select Import CSV. Before you upload, select Template to get a file with the right columns.

  1. 1
    Upload your file

    On the Upload step, choose your completed CSV file.

  2. 2
    Review the rows

    On the Review step, check each row. Confirm that your company owns or is responsible for every domain in the file.

  3. 3
    Finish the import

    The Done step shows the result. A file holds at most 500 rows by default, so split a longer list into several files.

To download the whole list as a CSV file, select Export CSV.

Check a domain

Select Start check for a domain that has not been checked yet. Select Re-check for a domain that has been checked. To check several domains at once, select their rows and select Re-check selected.

What you see

Open a domain to see its detail page:

  • Overall posture: Strong, Fair or At risk.
  • Open findings: the findings that are still open.
  • Points to: where the domain points.
  • Host country: the country where the site is hosted.
  • Certificate expires: the date when the site’s security certificate expires.
  • Last checked: when the last check ran.
  • Nightly re-check and Auto-renew: the current value of each setting.
Domain detailExample
Overall postureFair
Open findings3
Last checked2026-10-14
Certificate expires2027-01-20
Example values only.

Scan Report

What this module is for

The Scan Report shows the security posture of your company as an outsider sees it. The scan looks at your domain, your email setup and your website from the outside. Use the report to find weak points and decide what to fix first.

Before you start

  • Select the tile that shows the public scan score on the dashboard. The tile opens the report.
  • Every role can read the report. Only a User or an Admin can rescan.

What you see

The report has four parts:

  • The findings: the problems the scan found. Read each one, then decide which to fix first.
  • The frameworks: the findings mapped to compliance frameworks.
  • The Law 25 risk: the risk the findings create under Law 25, the Québec privacy law.
  • The comparison: how your results compare with similar companies.

Rescan the company

Select Rescan to start a new scan. A cooldown applies, so you cannot start another scan straight away. Auditors can read the report but cannot rescan.

Read earlier versions

Open the history to see the earlier versions of the report. Select View to read a version, or Download to save its PDF.

Free scan from the website

You can scan a domain from the website without an account. NextIT checks your email address with a code before it scans.

  1. 1
    Ask for a code

    Enter your domain on the website, then request a verification code by email.

  2. 2
    Enter the code

    Enter the 6-digit code from the email. The code is valid for 10 minutes.

  3. 3
    Read your report

    Request the scan. When it finishes, view your posture report.

Good to know: You can request at most three codes for one email address in 10 minutes. Wait before you request another code.

Tips

  • Rescan after you fix a finding, so the report shows the new result.
  • Check the Certificate expires date of each domain every month.
  • If you connect an AI assistant, you can ask it to rescan your posture. It asks you for approval before it acts.
Connect NextIT to your agent of choice via MCP for real-time answers.
Was this page helpful?

Free posture report

Is your business exposed? Find out in 5 minutes.

Enter your domain. Confirm ownership by email, then get your free security posture & compliance report.

Book a strategic meeting
  • No card required
  • Hosted in Canada