Check your infrastructure.
See the truth.

Many mail servers are misconfigured – without the operator noticing. Emails end up in spam, get rejected, or can be forged. Vernax checks MX, SPF, DKIM, DMARC, PTR, DANE, MTA-STS, blacklists and more – and explains in plain language what each check means and what you can do if something is wrong.

An expired certificate is one of the most common self-inflicted outages – and it still happens all the time. Vernax checks validity, issuer, expiry date, TLS version, cipher suites, HSTS headers and the full certificate chain. In the Pro tier, Vernax monitors your certificates automatically and warns you 30, 14 and 7 days before expiry.

DNS changes often go unnoticed – through accidental edits, registrar issues, or in the worst case through DNS hijacking. Vernax creates a snapshot of your DNS records and continuously monitors them for changes. If an A record, MX or TXT entry changes unexpectedly, you get an immediate alert – before your users notice.

A forgotten domain renewal, a missing transfer lock, or an unexplained registrar change – these problems often go undetected for weeks. Vernax checks expiry date, registrar, EPP status flags, nameserver consistency and domain age directly from registry data via RDAP.

Certificate Transparency logs are the internet's memory: every certificate ever issued is recorded there. Vernax reads these logs, finds all subdomains of your domain, detects unknown CAs and checks which subdomains are still active.

Missing security headers, no HTTPS redirect, exposed server version numbers or open database ports – many websites have avoidable security gaps. Vernax checks HTTPS redirect, HSTS, Content-Security-Policy, all important security headers, server information leaks and open ports.

Why are my emails not arriving? Why does Chrome warn about my site? The answer is often a blacklist entry. Vernax checks your web and mail server IPs against the major DNS blacklists, the domain itself against Spamhaus DBL and SURBL (with categorisation: spam, phishing, malware) and optionally against Google Safe Browsing.

A reachable .git directory, a .env with all your passwords, a forgotten database backup in the web root — almost every hit is a real security incident. Vernax actively probes for these classic self-hosting accidents. Because it requests confidential paths, the check is only available for domains verified in your workspace.

Remotely loaded Google Fonts, trackers firing without consent, US CDNs without a legal basis, cookies set before any opt-in — the most common privacy and warning-letter risks on the web. Vernax loads the homepage and its linked CSS files and probes for exactly these. Security is abstract; a warning letter is concrete.