Every tool from the book, doing the math for you. Your answers stay in this browser and nowhere else.
Send your own website a request after 6pm, from a phone your team won't recognize. Then answer three questions about what came back in the first hour.
One location, one month. The boxes start with the book's example. Replace them with your numbers.
Each leak is what that one door costs if everything below it stays the same. Don't add them up: fixing one door changes the next.
One request to every location, every month, after 6pm. Score each one with tool 1.
| Location | Sent | Reply (min) | Rung | Score |
|---|
Tick what your website and system have today. 69 of the 281 forms we checked had no lock at all.
Listen to the last voicemail your team left a new lead. None of the 19 voicemails we heard passed all seven.
Fill in your own form and open what comes back.
Type the domain your emails come from (the part after the @). This reads its public records. Only 91 of the 301 company domains we checked tell inboxes to quarantine or reject fake email.
This checks the records your domain publishes. To see whether a real email passed, open it, choose "show original" in Gmail, and look for SPF, DKIM and DMARC: all three should say pass.
