Threat examples and compliance framing adjust per vertical. Re-scanning karrsecurity.com preserves your current scores.
Enter a domain, URL, or email address to generate a compliance report.
Overall Compliance Rating
karrsecurity.com has gaps that may weaken protection of employee PII and payroll data under GLBA and IRS e-file safeguards. Prioritize the remediation plan below before relying on this configuration as a defensible posture.
This tool uses a weighted algorithm focused on GLBA and IRS e-file security requirements:
-all vs exploitable ~all) and DMARC enforcement including explicit sp=reject subdomain policy and np=reject for non-existent subdomains.mode=enforce (not testing/none), plus TLS-RPT and DNSSEC signals. DNS host, IPv6 dual-stack, and BIMI are shown for guidance and are not primary score drivers.lyncdiscover (Microsoft Lync legacy targets are Info only).Without strict DMARC (p=reject) and SPF (-all), attackers can email employees as your provider:
payroll@karrsecurity.com email redirects an employer's ACH file to an attacker-controlled account.Unlock the full report for every control — MTA-STS, TLS-RPT, DNSSEC, HSTS, CSP, clickjacking, CAA, security.txt, and endpoint risk — each with named incidents and remediation steps.
The paid report adds a step-by-step playbook: Have I Been Pwned check (when you audit by email), MFA rollout, password-manager guidance (we suggest Proton Pass), and Microsoft 365 / Google Workspace compromised-credential settings — plus our breach-monitoring guide if exposure is found.
Your infrastructure reveals specific vulnerabilities regarding GLBA and IRS e-file security requirements. Unlock the full report to access actionable remediation steps, granular DNS data, and the tools below.
What's included in the full report ($99)
Everything below unlocks immediately after checkout—no separate subscriptions.