What the Business Risk Scanner checks
The scanner reviews selected public signals associated with a domain, such as HTTPS certificate status, DNS records, SPF and DMARC email policies, selected security headers and basic website metadata. It may also ask you about backups or recovery arrangements that cannot be verified from outside your business.
A score is a starting point for discussion. It is not a penetration test, a guarantee of security, or a complete assessment of your Microsoft 365 tenant, backups or internal systems.
How to read your results
A missing DMARC enforcement policy may indicate an email-spoofing risk worth reviewing. A valid TLS certificate is a positive signal, but it does not prove the whole website is secure. Missing security headers can highlight configuration work, while backup and disaster-recovery claims need evidence from your own systems.
Results can change as DNS, certificates and website settings are updated. Confirm important findings with an authorised IT professional before making changes.
What happens after the scan?
Save the findings you want to discuss and send Southcore an enquiry. We can talk through the priorities in a free 15-minute initial assessment and agree whether a deeper review is needed. An appointment is arranged separately.
Looking for ongoing support? Explore managed IT services for Melbourne businesses.