Risk Ledger

Learn about Risk Ledger's new External Monitoring feature, including how the beta program works, what security configurations we scan, data privacy details, and how to get the most out of…

External Monitoring Beta: Frequently Asked Questions

Dan McKenzie

Learn about Risk Ledger's new External Monitoring feature, including how the beta program works, what security configurations we scan, data privacy details, and how to get the most out of the tool.

External Monitoring (Beta)

SPF works like a security guard for your email domain. It tells receiving servers which email systems are allowed to send mail using your domain name.

Are SPF records protecting the email domain?

We monitor your DMARC (Domain-based Message Authentication, Reporting, and Conformance) configuration to ensure you have a strong policy that tells receiving servers how to handle suspicious emails from your domain.

Is DMARC enforcing the domain's email security policies?

We monitor your DKIM (DomainKeys Identified Mail) configuration to verify your emails are digitally signed and protected against tampering.

Is DKIM protecting the domain's emails from tampering?

Protect domains from email spoofing and phishing through email authentication methods such as SPF, DKIM, and DMARC. These controls verify email legitimacy and build sending reputation.

Email Security

We monitor your HSTS (HTTP Strict Transport Security) configuration to ensure browsers only connect to your domain using secure HTTPS connections.

Is HSTS enforcing secure connections to your domain?

We monitor your CSP (Content Security Policy) configuration to ensure your website only loads resources from trusted sources and prevents code injection attacks.

Is the Content Security Policy (CSP) protecting the domain from malicious code?

HTTP security headers tell browsers how to handle your website's content securely. We monitor these headers to ensure they're properly configured to prevent common web attacks.

Are HTTP security headers protecting the domain?

Transport Layer Security (TLS) creates an encrypted connection between your website and its visitors. We monitor your TLS configuration to ensure it's properly securing data in transit.

Is TLS configured securely on the domain?

Protect websites from attacks and data theft through secure connections and content controls such as TLS, security headers, and content policies. These configurations ensure secure content delivery and prevent malicious code.