# Free domain security report for MSP prospects

Enter a prospect's domain and get an outside-in security report in about
20 seconds: lookalike domains that can send email, every certificate in the
public logs, SPF, DMARC and the domain's registration. It reads public data
only, the same data an attacker sees, and needs no access to their systems.

The result is a page you can share by link for 90 days. On the
[MSP plan](/pricing), the same checks run continuously for each client, with
monthly PDF reports under your own name and logo.

## What's in the report

| Section | What it shows | Why the prospect cares |
|---|---|---|
| Lookalike domains | registered lookalikes, their age, which can send email | fake invoices to their customers come from these |
| Certificates | every hostname from the public logs, expiry, renewals not installed | forgotten hosts and outages they haven't noticed |
| Email | MX, SPF lookup count, DMARC policy | whether anyone can send email as them today |
| Registration | expiry, transfer lock, public WHOIS details | the domain the whole business runs on |

## Using it in a sales conversation

Scan only with the prospect's agreement, for example as part of a free
assessment, and keep it about their risk, not your product. What lands best:

- **One concrete finding.** "Someone registered `acme-invoices.com` three
  weeks ago and it can send email" is more persuasive than a score.
- **Their DMARC policy.** `p=none` or no DMARC means anyone can send email
  as them. It's quick for you to fix and easy for them to understand: see
  [DMARC from none to reject](/guides/dmarc-none-to-reject).
- **A certificate that's close to expiry** on a host they'd forgotten.
- **What you'd do about it**, in two or three steps.

## Email template

```
Subject: What we found looking at acme.com from the outside

Hi Sam,

As discussed, we ran an outside-in check of acme.com using public data
only. Three things stood out:

1. acme-invoices.com was registered 3 weeks ago and can send email.
   Domains like this are used for fake invoices to your customers.
2. Your DMARC policy is p=none, so mail pretending to be from acme.com
   isn't blocked by Gmail or Outlook.
3. The certificate on vpn.acme.com expires in 12 days.

The full report is here: <link>

Happy to walk through it and what we'd fix first. 20 minutes this week?
```

## After they sign

Add the domain to Nameward under the client and the checks run every few
hours, with alerts to the channels you choose and a monthly white-label PDF
for the client. See [pricing](/pricing) for the MSP plan.

## Related guides

- [MSP client onboarding checklist](/guides/msp-client-onboarding-domain-security-checklist)
- [SSL certificate monitoring for MSPs](/guides/ssl-certificate-monitoring-for-msps)
- [Certificate and domain renewal email templates for clients](/guides/certificate-renewal-email-template)
- [Someone is pretending to be my company](/guides/someone-is-pretending-to-be-my-company)
- [How to check a supplier's email before paying an invoice](/guides/verify-supplier-email-before-paying)
- [100-day SSL certificates from March 2027](/guides/100-day-ssl-certificates)

---
Source: https://nameward.app/tools/msp-domain-security-report (updated 2026-10-30)