Free tool · no signup
Is your domain set up safely?
One check for the things that break or leak quietly: an expiring or mismatched SSL certificate, a missing HTTPS redirect, and database ports left open to the whole internet.
Connect a server to watch this all the time
This is one check, right now. Opservo watches certificate expiry, uptime and exposed ports on every server continuously, scores each server’s security 0–100, and tells you in plain English what changed and how to fix it — before the certificate lapses or a scanner finds the open port.
Questions
What does the domain check look at?＋
The SSL certificate on port 443 (is it trusted, who issued it, when it expires, whether it covers the name, whether the full chain is served), the A, AAAA, MX, NS and CAA records, whether plain HTTP redirects to HTTPS, and whether SSH, MySQL, PostgreSQL, Redis, MongoDB, Elasticsearch or Memcached accept connections from the internet.
Why does an open database port matter?＋
Databases and caches like MySQL, Redis and MongoDB are meant to listen only on localhost or a private network. If they answer from the internet, they are being probed by automated scanners around the clock, and one weak password or unpatched version is enough for a breach or a ransom note.
Is the port check intrusive?＋
No. It opens a TCP connection to each of seven fixed ports and closes it immediately without sending anything — the same thing every internet scanner already does to every public server. Each domain is checked at most once every 10 minutes.
Why can’t I check an internal domain or an IP address?＋
For safety the tool only checks public domain names that resolve to public internet addresses. Names pointing at private, loopback or cloud-metadata addresses are refused.