# Scanward > Scanward is an external security scanner and attack surface monitoring platform for SMBs, agencies, and MSPs. It continuously monitors domains for security issues and delivers a single A-F security grade. Scanward scans six security dimensions: SSL/TLS certificates, DNS records, HTTP security headers, email authentication (SPF, DKIM, DMARC), uptime, and domain registration expiry. It runs automated scans on a schedule, alerts teams when something breaks or degrades, and provides remediation guidance. ## Target Users - Small and medium businesses without a dedicated SOC - IT managers and sysadmins responsible for domain security - Digital agencies managing client domains - MSPs (Managed Service Providers) monitoring customer infrastructure ## Key Features - External attack surface monitoring with A-F security grading - SSL certificate monitoring and expiry alerts - DNS record monitoring, DNSSEC validation, dangling CNAME detection - HTTP security headers checking (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy) - Email authentication monitoring (SPF, DKIM, DMARC) - Domain registration expiry monitoring via RDAP and WHOIS - Uptime monitoring - Scheduled rescans with plan-based intervals (24h free, 12h pro, 6h agency) - Email alerts for grade drops, SSL expiry, domain expiry, unreachable domains, score drops - Branded PDF security reports - Free tier: 1 domain, Pro: 10 domains ($29/mo), Agency: 50 domains ($79/mo) ## Free Tools (no signup required) - SPF Record Generator: https://scanward.com/tools/spf-generator/ - DMARC Record Generator: https://scanward.com/tools/dmarc-generator/ - SSL Certificate Checker: https://scanward.com/tools/ssl-checker/ - DNS Lookup Tool: https://scanward.com/tools/dns-lookup/ - Security Headers Checker: https://scanward.com/tools/security-headers/ - WHOIS Lookup: https://scanward.com/tools/whois/ ## Blog & Guides - What Is External Attack Surface Management (EASM)?: https://scanward.com/blog/what-is-easm/ - The Complete Guide to SPF, DKIM, and DMARC: https://scanward.com/blog/spf-dkim-dmarc-guide/ - 7 Security Headers Every Website Needs: https://scanward.com/blog/security-headers-guide/ - DNSSEC Explained: What It Is and How to Enable It: https://scanward.com/blog/dnssec-explained/ - SSL Certificate Monitoring: Prevent Expiry Downtime: https://scanward.com/blog/ssl-certificate-monitoring/ - Domain Expiry Monitoring: A Hidden Security Risk: https://scanward.com/blog/domain-expiry-monitoring/ - Check Your Domain Security Score in 30 Seconds: https://scanward.com/blog/domain-security-score/ - Scanward vs Hardenize: Security Monitoring Compared: https://scanward.com/blog/scanward-vs-hardenize/ - Domain Security Scanner: How to Scan Your Domain for Vulnerabilities: https://scanward.com/blog/domain-security-scanner/ - Subdomain Takeover: What It Is and How to Prevent It: https://scanward.com/blog/subdomain-takeover/ - Website Security Grade: What It Means and How to Improve Yours: https://scanward.com/blog/website-security-grade/ - DNS Monitoring: Why You Need It and How to Set It Up: https://scanward.com/blog/dns-monitoring/ ## Links - Website: https://scanward.com - Dashboard: https://app.scanward.com - Tools: https://scanward.com/tools/ - Blog: https://scanward.com/blog/ - FAQ: https://scanward.com/faq/