A records
Public IPv4 addresses returned by DNS, when available.
PUBLIC DOMAIN SIGNALS
Start with what the internet can see.
ByteGuardian gives you a one-off, read-only look at your domain’s public DNS and TLS certificate signals—without an account, ownership proof, or intrusive checks.
No account required Passive DNS + TLS signals
No account or ownership verification. Public DNS and TLS signals only.
No active probing, authenticated checks, timelines, monitoring, or alerts.
Public signalsRead-only by design
PASSIVE SCAN
Your domainOne-off public lookup READY TO CHECK
SCAN SCOPEPublic DNS + TLS signals onlyNo account, ownership verification, or active probing.
6SIGNALS
PUBLIC SIGNALS WE CHECKHow it works
DNSsignal 01A / AAAA recordsAddress records, if publishedPUBLIC
DNSsignal 02MX recordsMail-routing records, if publishedPUBLIC
DNSsignal 03NS / TXT recordsNameservers and text signalsPUBLIC
TLSsignal 04Certificate lifetimeIssuer and 100-day signal, if publicPUBLIC
Honest outcomesUnavailable data stays visible
BUILT FOR THE PEOPLE RESPONSIBLE FOR KEEPING THE WEB RUNNING
SMALL BUSINESSIT CONSULTANTSAGENCIES
A CLEAR FIRST CHECK
One scan. Public data. No guesswork.
INPUTSubmit a normalized domainURLs and www prefixes are cleaned before the scan is saved.
OUTPUTSee the saved scan statusCompleted and unavailable signals are shown separately, with no fabricated result.
Run a passive scan WHAT IS IN SCOPE
See the signals that are already public.
This first ByteGuardian flow is intentionally narrow: a one-off lookup of public DNS and Certificate Transparency signals for the domain you submit, with no active probing or deeper checks.
MX records
Public mail-routing records published for the domain.
Nameservers
The authoritative nameservers visible through public DNS.
TXT records
Public text signals returned by the domain’s DNS zone.
TLS certificate
Public issuer and certificate lifetime signals, when available.
Unavailable DNS or TLS signals are reported as unavailable instead of being inferred.
ETHICAL BY DESIGN
Clear signals. Clear limits.
Know exactly what this one-off public scan does before it runs.
01
Start with public signals
A read-only check starts with public DNS and Certificate Transparency signals.
02
Read public signals
The scan reads A, AAAA, MX, NS, TXT, and public certificate signals.
03
Keep the result honest
Returned signals are shown as completed; unavailable lookups stay marked unavailable.
Your domain stays in your hands. This flow reads public DNS and Certificate Transparency signals only. It does not verify ownership or run active tests.Ask about our checks
FOR CONSULTANTS & AGENCIES
Make the first client review more useful.
Run a clear, one-off public scan before a conversation. The result gives you a shared starting point without pretending to monitor a domain or replace deeper security work.
One domain per scan Public DNS + TLS data Unavailable stays visible
Scan a domain BYTEGUARDIAN COUNTDOWNPUBLIC LOOKUP
ONE-OFF PASSIVE SCAN
Scope stays small
Only passive, publicly observable DNS and TLS signals are read.
ACCOUNTNO
PROBINGNO
DNS + TLS signalsA, AAAA, MX, NS, TXT, and certificate lifetimePUBLIC
Returned data is saved with its scan status
BYTEGUARDIAN COUNTDOWN NO FABRICATION
START WITH A PUBLIC SIGNAL
Scan my domain Run one passive scan for your domain.
Submit a domain above, then use the saved status as an honest starting point for your next review.