Effective November 5, 2026

Blue Steel Technologies offers two free scanners on this website: the Cyber Score, which checks a domain’s email and website security, and the Vibe Check, which looks for security gaps common to websites and apps built with AI tools. This page explains how they work and the rules we hold them to.

What the scanners check

Both scanners only look at information that any visitor on the internet can already see. That includes:

Public DNS records, such as email authentication (SPF, DKIM, and DMARC) settings
The website’s security certificate and the security headers it sends to browsers
The pages, scripts, and files the website sends to any browser that visits it
Common locations where configuration files or backups are sometimes left public by mistake
Whether storage the site links to is set to public
Signs of which tool or platform built the site

What the scanners never do

They never log in to anything or try usernames or passwords.
They never try to break in, exploit a weakness, or change anything on the site.
If a scan finds a key, password, or token, we report where it was found. We never display its value, never store it, and never use it to access data.
They never scan your internal network or anything that isn’t already public.

Only scan sites you’re authorized to check

Before running a Vibe Check, you confirm that you own the site or are authorized to request a security check of it. Please only scan domains that belong to you or your business, or that you have permission to check.

Limits

We limit how often any single domain or visitor can run a scan, to prevent abuse and to keep the load on scanned sites light. Each scan sends a small number of ordinary web requests, about what a few page visits would.

What we keep

We keep the domain scanned, the score, and the date. If you ask for the full report, we keep your email address with it, as described in our privacy policy. We do not keep any secret values a scan comes across.

Opting out

If you own a domain and don’t want it scanned by our tools, email security@bluesteeltechnologies.com from an address at that domain, and our team will block it from future scans.

Found something serious?

A scan result isn’t a full security review. If your result shows exposed keys or open data, treat it as urgent: rotate the exposed keys, then contact our team or call 810-377-8189 and we’ll help you close the gap.

Scanning Policy