What does Iron Check scan?

Iron Check fetches what the internet receives from your domain—origin, headers, cookies, and third-party resources. It reads public DNS records for mail spoofing (DMARC, SPF, DNSSEC) and checks who may issue certificates. It performs hygiene auditing rather than penetration testing.

What does the $12 full report include?

The full report includes a written brief, observed header values, third-party roles, complete DNS and mail-authentication records, CAA and DNSSEC information, copy-paste fixes for nginx/Apache/Cloudflare, a 30-day remediation plan, and export options in PDF or Markdown format.

What networks will Iron Check not scan?

Iron Check will not scan private, local, metadata addresses, or RFC1918 and loopback addresses. It fetches only from the public URL you submit and does not follow redirects to private networks.

Who is Iron Check designed for?

Iron Check is designed for small businesses, parish and nonprofit sites, and anyone who shipped a landing page and never reviewed the response headers.

Fact sheet · Cybersecurity

Iron Check

Website hygiene scoring for HTTPS, headers, cookies, and privacy

Visit check.irondeveloper.com (opens in a new tab)0 votes. Log in to vote for Iron Check in the file community vote²Not yet verified by the maker

Iron Check specifications

Specifications of Iron Check
Section	Cybersecurity
Website	check.irondeveloper.com
Votes²	0

Iron Check metrics

Fact file for check.irondeveloper.com: Ahrefs Domain Rating and Majestic link facts, each with the change since the last fact check.
Metric	Value
Domain Rating	0 −2 (down) since last check
Trust Flow	2 no change since last check
Citation Flow	28 no change since last check
Referring domains	0 no change since last check
External backlinks	0 no change since last check

Fact: Ahrefs Domain Rating checked 17 Oct 2026, fact changed 17 Oct 2026. Fact: top topic Arts (2). Fact: Majestic checked 16 Oct 2026, fact changed 16 Oct 2026. Link facts from Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.

Iron Check domain fact sheet

Read from the public RDAP record on 16 Oct 2026, 14:51 UTC.
Domain age	8 years
Registered	8 Jun 2018
Expires	8 Jun 2027
Registrar	Cloudflare, Inc.
DNSSEC	Not signed

Every domain fact for irondeveloper.com

Iron Check scans your website's public configuration and scores its security hygiene, checking HTTPS, headers, cookies, DNS records, and privacy basics.

Overview

Screenshot of the Iron Check homepage — What check.irondeveloper.com looks like

Iron Check is a website security scanner that audits the public-facing configuration of your domain. It fetches what the internet sees—origin, headers, cookies, and third-party resources—checks the domain's public DNS records for mail authentication vulnerabilities, and provides a score.

The free scan returns a score, letter grade, and structured findings including DMARC and SPF checks. The $12 full report adds a written brief from an AI, observed header values, third-party roles, complete DNS records, mail authentication details, CAA and DNSSEC information, and a 30-day remediation plan with copy-paste fixes for nginx, Apache, and Cloudflare.

Iron Check performs outside-in hygiene auditing rather than penetration testing. It does not scan private networks, follow redirects to RFC1918 addresses, or store raw client IPs. The tool is designed for small businesses, nonprofits, and anyone who needs to understand their website's public security posture.

Feature facts

Scores website public hygiene and security configuration
Checks HTTPS, headers, cookies, and third-party resources
Analyzes DNS records including DMARC, SPF, DNSSEC, MX, NS, and CAA
Free scan with score and letter grade
Paid report with written brief and 30-day remediation plan
Copy-paste fixes for nginx, Apache, and Cloudflare
Eight free scans per day per network
No private network or RFC1918 scanning
Export in PDF, Markdown, or print format

Pricing

Pricing model: Freemium

Free scan: $0 with score, letter grade, and structured findings. Full report: $12 with written brief, DNS records, mail-authentication, CAA and DNSSEC, 30-day plan, and export options.

Compare and explore

Frequently looked up

Q1What does Iron Check scan?: Iron Check fetches what the internet receives from your domain—origin, headers, cookies, and third-party resources. It reads public DNS records for mail spoofing (DMARC, SPF, DNSSEC) and checks who may issue certificates. It performs hygiene auditing rather than penetration testing.
Q2What is included in the free scan?: The free scan provides a score, letter grade, and structured findings including DMARC and SPF checks. You can run eight scans per day per network.
Q3What does the $12 full report include?: The full report includes a written brief, observed header values, third-party roles, complete DNS and mail-authentication records, CAA and DNSSEC information, copy-paste fixes for nginx/Apache/Cloudflare, a 30-day remediation plan, and export options in PDF or Markdown format.
Q4What networks will Iron Check not scan?: Iron Check will not scan private, local, metadata addresses, or RFC1918 and loopback addresses. It fetches only from the public URL you submit and does not follow redirects to private networks.
Q5Who is Iron Check designed for?: Iron Check is designed for small businesses, parish and nonprofit sites, and anyone who shipped a landing page and never reviewed the response headers.

Leave a review for Iron Check

Review count for Iron Check: none yet. Add the first.

Fact: reviews are free and cannot be bought. All reviews, in brief

Reviews and facts · Fact updates · Share these facts · Your SaaS? Claim this fact file · Report a wrong fact

Product	Origin	DR¹	Votes²
PravaNative AI cybersecurity that predicts and prevents enterprise threats across your entire attack surface	not stated	19	0 votes. Log in to vote for Prava in the file
SecureLeapPenetration testing and compliance consulting for startups	Portugal	29	0 votes. Log in to vote for SecureLeap in the file