Tools overview¶
All nine tools follow the same principle: enter a domain, wait for the live check, read the results with explanations. No account required.
| Tool | Checks | Data sources |
|---|---|---|
| Mail Health | 15 | DNS (Google/Cloudflare resolvers), SMTP connection to the MX, DNSBL zones |
| SSL/TLS | 5 | TLS handshake to port 443, HTTP requests |
| DNS | 7 | DNS queries of all relevant record types, AXFR attempt at each nameserver |
| Certificate Transparency | 5 | crt.sh (public CT logs), HTTP reachability tests |
| Web Security | 7–8 | HTTP(S) requests, TCP port scans, NVD (CVE database) |
| Domain | 6 | RDAP (successor to WHOIS), DNS comparison |
| Reputation | 3–4 | DNSBL/DBL zones (Spamhaus, Barracuda, SpamCop, SURBL), optionally Google Safe Browsing |
| Exposure | 5 | Active HTTP requests of known sensitive paths (verified domains only) |
| Privacy | 5 | Homepage + linked CSS: Google Fonts, trackers, third country, cookies, CMP |
What Vernax does not do¶
- No invasive tests: no exploits are run, no logins are attempted and no load is generated. The AXFR test (DNS) and the port scan (Web) are simple connection attempts.
- No estimated data: every displayed result comes from a real query at the time of the check. If something can't be queried, Vernax shows that openly as "info" instead of inventing values.
- No tracking of the checked domains beyond what is technically necessary.