SMB Scanner - an evidence based external security assessment tool for business

SMB Scanner Lite is an evidence-first external security posture assessment tool for Small and Medium Businesses (SMBs) and blue-team audits. It evaluates a domain’s public internet footprint without agents or service disruption and delivers a clear 0–100 Posture Score (Grade A–F).

It checks 22 critical controls across four areas:

1. Email Anti-Spoofing (4 controls): Full SPF, DMARC (p=reject), DKIM key strength, and MX hygiene to prevent forged emails.

2. Domain & DNS Integrity (6 controls): DNSSEC validation, CAA records, zone-transfer protection, open resolvers, and dangling subdomain risks across 16 cloud providers.

3. Transport Security (2 controls): TLS protocol support, certificate validity, and HTTPS enforcement.

4. Web Security Headers (9 controls): HSTS, CSP, clickjacking protection, cookie flags, CORS, and more.

5. Network Exposure (1 control): Safe checks on 23 high-risk ports including SMB, RDP, databases, and others.

Key features include an “evidence-v7” scoring model that marks timeouts as INCONCLUSIVE (no false failures), full accounting of all 22 controls, and multi-format reports (HTML, JSON, CSV, TXT) with historical comparison.

To prevent misuse, the full source remains private. The public sandbox is locked to five free testing domains, and every scan requires explicit user consent that generates a tamper-evident SHA-256 Consent Proof Receipt embedded in the report.