Checking...

Edge Grade

Paste a domain. Get an instant letter grade for its edge protection posture. Free, no signup, passive signals only — we never send load to the target.

No signup Passive only — zero load applied ~5 second result 30 lookups / hour / IP
B
example.com
Score 82 / 100
CDN / WAF ✓ Cloudflare proxy active
TLS posture ✓ TLS 1.3 · h2 ALPN · HSTS present
DNS posture ⚠ DMARC not configured
Origin concealment ⚠ Origin candidates leaked via CT logs (3)
Public hygiene ✓ security.txt present

Want the full picture? The Edge Grade only inspects passive signals.

Run a deep scan with consent →

What we measure

Edge Grade aggregates five signals into a single letter grade. We send zero load to the target — no probes that count against a rate limit, no requests that trigger a WAF rule. Every signal is derived from public DNS, public CT logs, and the same single HTTPS connection your browser would make.

S1

CDN / WAF fingerprint

Single HEAD request. Inspect Server, CF-Ray, X-Amz-Cf-Id, X-Azure-Ref, X-Cache, X-Akamai-* headers.

S2

TLS handshake

TLS version, cipher suite, ALPN, certificate issuer + SAN list, HSTS header.

S3

DNS posture

DoH query for A, AAAA, MX, CAA, SPF, DMARC, TXT records. IPv6 present? CAA configured?

S4

Origin concealment

CT log scan. Count distinct subdomains. Cross-reference with CDN fingerprint to estimate origin discoverability.

S5

Public hygiene

security.txt, robots.txt, HTTP/2 negotiation on apex + www, consistent redirect behavior.

Grade scale

A 90-100 · all defenses present
B 75-89 · most defenses present, minor gaps
C 60-74 · mixed posture
D 40-59 · naked origin or weak TLS
F 0-39 · no protection signals at all

Methodology you can audit

The signal logic is calibrated against the DDactic Edge Protection Scorecard. The CDN/WAF fingerprint dictionary, TLS scoring rubric, and DNS posture weights all come from the same per-vendor research. No public claim ships without a JSON receipt.

Edge Grade is in early access. The lookup is live but may return partial results while calibration continues. See the full vendor scorecard for the underlying research.