ZeroHook
NIS2 evidence collection

Every DNS record you have never read.

ZeroHook reads all thirty-five of them in under sixty seconds, names the ones that let a stranger send mail as you, and hands you the exact record to paste.

Run a free scanSee a sample report
zerohook.org/home/scan

Run a new audit

Scan any client domain for email security, DNS and infrastructure gaps.

0 / 25 audits used today on the Agency/MSP plan

The scan

Thirty-five checks, five layers deep, in one run.

The free tier runs six checks with no account. Every paid tier runs all thirty-five, on a schedule, and keeps the history.

The score

One number, five layers behind it.

Every finding rolls up into a weighted score, so you always know which layer is dragging the domain down, and exactly how much each fix will move it.

The fix

Every finding ships with the record.

No finding ends at “configure DMARC correctly.” It ends at the value, the host, the TTL, and the screen in your registrar where they go, for Cloudflare, Route 53, GoDaddy and Namecheap.

After the fix

Then it keeps reading.

A probe every few minutes catches drift: a deploy rewrites SPF, a certificate lapses, a subdomain is left pointing at a host someone else can claim. You hear about it before your customers do — and each day's full audit is written to a timestamped evidence chain you can hand to an auditor.

Evidence

Audit-ready, without the audit prep.

NIS2, SOC2 and ISO 27001 reports generate themselves from 90 days of tamper-proof probe history, white-labeled with your own logo when you need to hand it to a client.

Who runs it.

SaaS and e-commerce

Your receipts and password resets have to reach the inbox. A scan tells you which record is sending them to spam.

MSPs

Every client domain on one dashboard. You get the alert at midnight and the fix is applied before anyone files a ticket.

Agencies

Run a scan at handover and ship the report with the site. Clients see what you caught before launch.

Security and compliance

An auditor asks for proof you monitor DNS. Export 90 days of probe history with a hash chain attached.

“We went from failing twelve checks to one in a single afternoon. The order to fix them in was already decided for us.”
Anna LiptaiHead of IT Security, EuroBank
“Audit prep used to take three weeks. Now it is one export and two days of review.”
Martin KovácsCISO, FinTech EU
“Our junior engineers close DMARC findings on their own now. The record is right there in the finding.”
James RodriguezDevOps Lead, TechStart

Scan a domain you own.

Six checks free, no account. Full scans and monitoring start at $29 a month, two months free on annual.

Run a free scanSee pricing