The ladder, in words that earn the prices

Free scan — $0

Sixty seconds. No email. No account.

Every domain on the internet either proves who it is — or hopes nobody asks. We run the same 34 checks we've run across the whole census, grade you A+ to F, and show you where you stand against every other domain on your TLD. About 86% of domains grade F. Most owners have simply never looked.

The scan is free because the looking should never be the hard part.

Fix Guide — free, to your inbox

Every problem, named. Nothing about what's wrong is held back.

The full list of what your domain failed, why each one matters to your business, and a link to the free fix guide for each — the diagnosis a consultant would bill an afternoon for, free. You (or your IT person) can start today.

We'll be straight with you: most people don't. Not because the fixes are hard — because nobody is sure what breaks when a DNS record changes at a company that's already busy. That's what the rest of this page is for.

A-Grade Playbook

$99 per domain

You know what's broken. This is how you fix it without breaking anything else.

The expensive part of DNS work isn't doing it — it's doing it in the wrong order. Turn DMARC enforcement on before your newsletter tool is aligned and your own invoices go to spam. Publish the wrong CAA set and your certificate quietly fails to renew weeks later. Change nameservers with a DS record in place and your domain goes dark. None of these mistakes announce themselves. All of them are avoidable if you know the sequence.

The Playbook is your domain's specific route from today's grade to an A, built from your live scan:

• Every step in risk order — zero-risk wins first, anything that can touch mail flow last, each with the exact copy-paste values for your records and click-paths for your consoles (we detect your registrar, DNS host and mail platform and write for them, not for "your provider").
• The tripwires, named — the specific way each step bites people, and how yours doesn't.
• 10 verification re-checks — after each step, press the button and watch your score move, measured by the same engine that grades every domain in the census. You're never wondering whether it worked.
• One regeneration — change your stack mid-journey and we re-cut the whole playbook to the new reality.
• Honest endpoints — if your setup can reach A but not A+, the playbook says so on page one. We'd rather tell you the ceiling than sell you the sky.

In one line: the free guide tells you what — the Playbook does the thinking and typing.

For context: an hour of any competent consultant runs about this price. This replaces the engagement — and it can't forget a step.

And the $99 never strands you: get stuck anywhere, and every cent credits against Fix It For Me or the A-Grade Guarantee for 90 days. Worst case, you paid nothing to find out you'd rather we did it.

Security Dossier

$149 per domain

For the day someone asks you to prove it.

Insurance renewal. A customer's vendor-security questionnaire. A due-diligence data room. Sooner or later a form arrives asking what your domain security posture is, and "we take it seriously" is not an answer anyone accepts.

The Dossier is the answer: a dated, signed, independently verifiable record of your domain's full posture — every check, every piece of evidence, the resolver and vantage it was measured from — with a public verification page anyone you hand it to can check for themselves. Ten re-checks included, so you can remediate and re-issue: what you submit shows today's state, not the day you bought it.

Most buyers don't need this. The ones who do, need exactly this.

Fix It For Me

$499 per domain, one-off

You could do all of this. Realistically, when?

The Playbook exists for people who'll clear an afternoon. This exists for everyone else. We take your domain to an A-grade — records written, sequenced, verified, with 90 days of monitoring after — and you do approximately three things: forward one email to whoever holds your registrar login, approve two changes, and watch the grade change.

The guarantee is not fine print: we get you to A-grade, measured against the public methodology version pinned to your order, or you pay nothing. Not a discount. Nothing. Conditions apply.

One-off, no subscription. If you'd rather your domain stayed watched and re-proven every year, the tier below is the better deal — we'll tell you that at checkout too.

Monitor

$19/month, or $190/year (12 months for 10) per domain · renews at $19/mo or $190/yr · cancel anytime

DNS records rot quietly.

A migration overwrites a TXT record. A vendor changes their include. A certificate renewal fails. Nothing announces it — mail just starts landing in spam, or the padlock just breaks, and you find out from a customer, days later.

Monitor is the finding-out, moved to the moment it happens: your domain re-checked continuously, any regression alerted the day it occurs, and a signed monthly certificate that says — provably — everything held. Drop below your grade while monitored and you'll know before anyone who matters does.

Nineteen dollars. Less than the first awkward "did you get my email?" phone call costs. Cancel anytime.

Fully Managed

$199/month, or $1,990/year (12 for 10) per domain · renews at $199/mo or $1,990/yr · cancel anytime

Everything above, plus the parts you shouldn't have to think about at all.

Your DNS run end to end. DMARC lifecycle managed against live report data. WAF and DDoS protection in front of your site. Security headers maintained as standards move. Privacy-first analytics if you want them — no cookie banner required. A human accountable when something odd happens, and a monthly signed report proving it all held.

This is a security department, rented by the month, for about the price of two hours of consultancy. It scales with you because we built it to — the heavy lifting is automated, and the judgment is ours to staff.

Cancel anytime; we hand back your zone cleanly, with a 30-day grace period and an export. The exit being painless is part of why you can trust the entrance.