Check your website’s security headers and HTTPS, your domain’s email settings or an API endpoint’s configuration. Wolf-Agents flags potential issues and explains the findings. When you need to document or share them, use the report for that scan.
For IT service providers, in-house IT teams and anyone who needs to discuss technical findings with colleagues or clients.
No installation. No Wolf-Agents account. No email address required during the free report beta.
The checks cover selected settings and signals visible from outside the system. They do not inspect areas behind a login, source code or internal processes.
How are your security headers, HTTPS and other externally visible settings configured? The web check examines the address you enter, its redirects and selected features including the TLS certificate, domain DNS and delivered HTML.
It does not crawl every page or test your login.
What does your domain publish about email sending and transport protection? The email check examines settings such as SPF, discoverable DKIM keys and DMARC, along with signals from reachable mail servers.
It does not read mailboxes or prove reliable delivery or protection against every phishing attack.
What security signals does your publicly reachable API endpoint expose? The API check examines CORS, visible rate-limit headers, server information, HTTP methods, API headers and error responses.
It does not test user permissions or business logic. Rate-limit headers do not prove that a limit will hold under load.
Only check targets you operate or have been authorised to assess. Scanner usage rules
A flagged header or DNS record is a starting point. The report records what was checked, what was found and what could not be measured. Explanations, available recommendations and severity information help you assess what to do next.
All three formats use the same scan. Choosing another file type does not add another test.
Email domains that do not send mail also get PDF, DOCX and CSV reports when the result could be stored for download. A separate scope applies to those checks.
As an IT service provider or agency, record which settings were visible at the time of the check and which questions you want to discuss with your client.
Save a report before making a change, then run another check afterwards. Compare the two documents yourself. This does not provide an automatic comparison or ongoing monitoring.
Use the CSV table to assign findings and record progress in your existing workflow.
A report can provide a limited technical record within your documentation. It does not determine whether NIS2 applies to you or whether you comply. Germany’s NIS2 implementation (German)
Our guides explain web and email configuration, including settings for specific providers. Use them to understand a finding before changing your system.
Web security guides (German) · Email security guides (German)
Working on NIS2? Our NIS2 information for Germany (German) and the NIS2 checklist (German) remain available. A technical scan does not replace a review of legal or organisational requirements.
The public checks are free. During the report beta, the available report downloads are also free, with no email address required.
Individual reports and a discounted five-report pack are planned for a later paid launch, without a Wolf-Agents account. The pack is intended for one buyer or company. Sales are not open yet.
The scope is visible. Reports identify the target, scan time and catalogue version. Checks that could not be measured are identified as such.
Measurements and explanations have different origins. Measurements are collected automatically. The explanations were created with AI and have not undergone editorial review. References and ratings support your own review; they do not replace it.
Limits are part of the result. Protective systems in front of a target, connection problems and incomplete measurements can limit the findings. A report captures a point in time. It is not a security certificate.
The public web, email and API checks and their visible results are free. During the report beta, the available downloads are free too. You do not need a Wolf-Agents account or an email address.
It gives you a structured record of the scan to save, annotate and share. PDF, DOCX and CSV use the same measurements. The report does not include additional security tests hidden from the free results.
A grade reflects the assessment within that check. Areas outside its scope remain untested, and false findings are possible. When an overall assessment is not sufficiently supported, the report may omit the grade.
You can use results from authorised checks as working documents and share completed files within the applicable terms. White-label use and resale as a standalone product are not included as promised rights.
No. A download uses an existing scan result and does not start a new check. Start another scan when you need a new measurement. Save the files you need locally.
No. These automated checks examine a limited technical scope from outside the system. They do not replace manual security testing, an organisational audit or legal assessment.