Guard · by XIA Coder
How exposed is
your domain?
Scan your site for free in 30 seconds. Nothing to install: we review your domain's public configuration — email, TLS, headers, exposure — and show you what to fix first.
100% passive: we only read public data. We never touch your server or your data.
Scan your domain
Results in seconds. No signup for the first look.
From a link to an action plan in three steps
Nothing to install and nothing touching your server: the scan runs on public data and returns priorities, not a wall of acronyms.
Enter your domain
Instant passive scan: checks against your site's public configuration. Nothing to install.
Authorize by email
For deeper scans, you confirm from an email on your domain. That same email creates your account: no double signup.
Get the report
Score, findings prioritized with reproducible evidence, and the exact remediation. After that, XIA Guard keeps watching for you.
What XIA Guard reviews
Six risk families, ordered by real impact on your operation.
Email and impersonation
SPF, DMARC, DKIM, MTA-STS and TLS reporting. Could someone send phishing with your domain?
Certificates and encryption
Current certificate, accepted TLS protocols and issuing authority (CAA).
Browser headers
HSTS, CSP, COOP/CORP isolation and permissions policies.
Cookies and CORS
Cookie security attributes and which origins can read your responses.
Exposure
security.txt, routes returning 200 when they shouldn't, and server details.
Surface
Which parts of your stack stay visible to an attacker from the outside.
22 passive checks: DNS, TLS, headers, public files and surface. We never write anything to your infrastructure.
The report isn't a traffic light: it's a plan.
Every finding ships with the evidence to reproduce it and the step-by-step to fix it. Your technical team doesn't have to guess.
- 0–100
- Score computed in code, weighted by severity
- A–F
- A grade you can prioritize at a glance
- 14+
- Tier 0 checks, declared check by check
Your domain has no DMARC policy
Anyone can send email that claims to come from your domain, and most filters won't stop it.
▸ Publish a _dmarc TXT record with p=quarantine and report to rua@yourcompany.com.
Illustrative example. A real domain may have more findings and a different priority order.
Reproducible evidence
The exact command or URL to see what we saw. No black boxes, no conclusions without backing.
Step-by-step remediation
What to change, where and in what order, with the expected impact of each fix on your score.
Executive PDF and history
A report ready to share with leadership or an auditor, plus score history domain by domain.
Stuck on a finding? Ask XIA inside the panel: the report, the history and the chat live in the same place.
A scanner tells you. XIA Guard takes care of it.
Any free scanner gives you a list. The difference is what happens next.
| What you need | Standalone scanner | With XIA Guard |
|---|---|---|
| See your domain's status | A one-off scan you have to run again by hand | Immediate passive scan, no signup |
| Understand the risk | A list of acronyms with no context or priority | Findings ordered by severity and exploitability |
| Fix it | You hunt the fix across forums and scattered docs | Exact remediation with reproducible evidence |
| Prove it improved | Loose screenshots and dates nobody remembers | Score history and an executive PDF per domain |
| Keep it from happening again | Nobody checks again until the next scare | Continuous scanning with critical-finding alerts |
Free scanners are a good first step and can cover part of this. Continuous care, evidence and the executive report are what change the conversation with your team.
One domain to start. Your whole surface to grow.
Three XIA Guard add-ons on your Napsix account. If your plan already includes XIA Coder, the bundle applies -20%.
| What you need | Starter | Pro | Business |
|---|---|---|---|
| Domains under care | 1 | 5 | 15 |
| Continuous scanning and alerts | Included | Included | Included |
| Autofix pull requests | Not included | Included | Included |
| AI Red Team + compliance pack | Not included | Not included | Included |
Base price per add-on, billed separately. The -20% bundle applies when your active plan includes XIA Coder; exact limits are enforced per plan.
Before you scan your first domain.
Is it legal to scan my domain?
Do I need to install anything?
What's free and what's paid?
Does it work if my site is on a host or a SaaS?
Does XIA Guard fix issues for me?
We build it. We take care of it.
XIA Guard is the XIA Coder subproduct that protects what you already published — and what you're about to. One place to build and to care.
