# Nattvakt

> Nattvakt is a free, no-signup domain health and security scanner. Enter any domain and get an instant graded report on DNS, email authentication (SPF, DKIM, DMARC), DNSSEC, the TLS certificate and HTTP security headers - each with a plain-English fix.

All checks run live from public sources (Cloudflare DNS-over-HTTPS, Certificate Transparency, and a live HTTPS request). No account is required; Nattvakt records which domains get checked to power public stats, but never who checks them. A grade from A to D summarises how many checks pass.

## Main
- Full scan (interactive): https://nattvakt.com/
- Live usage stats: https://nattvakt.com/stats
- API documentation: https://nattvakt.com/api

## Free checkers
- DMARC Checker: https://nattvakt.com/dmarc-checker
- SPF Checker: https://nattvakt.com/spf-checker
- DKIM Checker: https://nattvakt.com/dkim-checker
- DNSSEC Checker: https://nattvakt.com/dnssec-checker
- SSL Certificate Checker: https://nattvakt.com/ssl-checker
- Security Headers Checker: https://nattvakt.com/security-headers-checker
- DNS Checker: https://nattvakt.com/dns-checker

## Guides
- What is DMARC?: https://nattvakt.com/guides/what-is-dmarc
- How to fix DMARC p=none: https://nattvakt.com/guides/fix-dmarc-p-none
- How to set up an SPF record: https://nattvakt.com/guides/spf-record-guide
- How to enable DNSSEC: https://nattvakt.com/guides/enable-dnssec-cloudflare
- HTTP security headers explained: https://nattvakt.com/guides/http-security-headers-guide
- What is DKIM?: https://nattvakt.com/guides/what-is-dkim
- How to fix an expired SSL certificate: https://nattvakt.com/guides/fix-expired-ssl-certificate
- Why your email goes to spam: https://nattvakt.com/guides/why-email-going-to-spam

## API (free, no key, CORS-enabled, JSON)
- GET https://nattvakt.com/api/check?domain=example.com - full report as JSON (grade, per-check results, and a findings list where each item has a human-readable fix).
- GET https://nattvakt.com/api/stats - aggregate usage statistics (totals, grade distribution, common gaps). No per-domain or personal data.
- Shareable report page: https://nattvakt.com/report/<domain>
- Embeddable status badge (SVG): https://nattvakt.com/badge/<domain>.svg

## Notes for agents
- Responses are cached briefly at the edge; please keep request rates reasonable.
- Nattvakt records the domain checked plus aggregate counts to power public stats; it never logs who performs a check.