How it works
Discover. Understand. Fix. Protect.
What happens between typing your domain and having a continuously monitored business — and what stays in your hands.
1. Discover
You enter your domain. PixelPrivate looks only at what the public internet can see: DNS records, email authentication records, the HTTPS connection and the homepage response.
You: enter a domain you own or are authorized to assess.
2. Analyze
Independent checks run against that public data. Each returns structured findings — evidence, severity, confidence, the check that produced it, and a timestamp. A failing check never stops the others.
You: nothing. Typically 10–30 seconds.
3. Prioritize
Findings are ranked by severity (how serious) and confidence (how certain). The PixelPrivate Security Score is calculated from published weights so every point is explainable.
You: read the “Fix first” list.
4. Explain
Each finding states the business impact first, then the technical detail. The AI Security Copilot can explain any finding or draft a message to your IT provider — grounded on your actual results.
You: ask the Copilot anything.
5. Fix
PixelPrivate generates the exact configuration (for example the DMARC DNS record) and steps. It never applies changes itself. After you change it, Verify fix re-checks and updates your score.
You or your IT provider: apply the change, press Verify.
6. Monitor
Scheduled re-scans detect changes in DNS, certificates, headers, email authentication and brand threats. You get alerts above the severity you choose and see what changed since last time.
You: enable monitoring; respond to alerts.
Safe by design
Why scanning your domain is safe — and why it can't be abused
Public data only
No logins, no internal access, no exploitation, no brute force, no load testing.
Hardened fetcher
Public hosts only; DNS is resolved once and pinned; redirects are re-validated; private and cloud-metadata addresses are blocked; time and size are capped.
Not a recon tool
Bot protection plus per-IP, per-domain and per-account limits stop it being used to map other people’s infrastructure.
Full detail: security methodology and acceptable use.
Frequently asked questions
How long does a scan take?
Usually 10–30 seconds. Scans run as background jobs, so you are never left waiting on a frozen page.
Does scanning affect my website or email?
No. It makes a small number of ordinary DNS and HTTPS requests, identified as PixelPrivateScanner, with strict limits on time, size and redirects.
Why does it say “not found” for DKIM when I use DKIM?
DKIM keys live under a provider-specific selector that cannot be listed from outside. PixelPrivate tries common selectors and tells you honestly when it can only say “unknown”.
Who can see my results?
Only members of your organization, or anyone you share an unguessable, expiring, revocable report link with.
See it on your own domain
Run the free check now or start the 14-day trial for monitoring.
No credit card · Cancel anytime · Reverts to the Free plan automatically