Exposure

Defense Tower helps you keep the web secured

Check a website you own from the outside. Each week you see the connection, common web protections, and whether email for your domain can be forged — then a written Exposure report tells you what to fix first.

Three cards, not one score Transport, web hardening, and domain authenticity stay separate so you can act on the right problem.
A site you own You connect the website. Checks run only for that host.
Weekly, then on demand A quiet weekly check, plus Check now when you want a fresh look.
Written, not guessed Each report shows what we see, the risk, and what is recommended.

Three ways the outside of your site can fail.

Defense Tower does not average these into one number. Each card is a different job.

Card 1

Transport

How the connection looks from the outside — whether visitors reach you over a protected connection.

Card 2

Web hardening

Common protections a public website is expected to show: headers and basic hardening visitors and browsers can observe.

Card 3

Domain authenticity

Whether someone could send email that looks like it comes from your domain.

What you see after a check.

An Exposure report is a short brief you can share with your team or export as markdown. It is written for the person who owns the site, not for a specialist review.

Exposure report

What we see, the risk, and what is recommended

Each finding stays attached to one card. You get a clear next step — not a dump of raw scan data.

  • What we see from the outside of the host you connected.
  • Why it matters, in plain language.
  • What is recommended, so you know what to change first.
  • Verify fix when you want to re-check after a change — that check is free.

An outside check. Not a security guarantee.

Defense Tower looks at a website you own the way a visitor or mailbox would. It does not replace a specialist review, and it does not promise that the site cannot be attacked.

Honest scope

What this page will not claim

The report is a posture brief for HEA owners. Failed checks do not charge. An unchanged weekly check does not create a new report.

  • It is an outside check of a site you own, not a full security review.
  • It does not hunt for hidden pages or unused services.
  • It does not score your HEA editor or privacy settings.
  • A written report is about 0.15 Training Credits if the report is created.

From a site you own to a brief you can act on.

The same path every week, and when you press Check now.

01

Connect the site

An HEA owner points Defense Tower at a website they own and proves control of the host.

02

Let the week run

A weekly check looks again from the outside. You can also run Check now.

03

Read the Exposure report

Three cards, findings, and recommended next steps. Export the brief if you want it offline.

04

Fix, then verify

Change what you own. Verify fix re-checks without creating a paid report.

The Outpost twin of Signal Tower.

Signal Tower asks whether people can find you. Defense Tower asks whether the site you already have is presented honestly from the outside.

Outpost

Visibility and exposure, side by side

Both live in Outpost. Both write a report you can improve over time. They answer different questions.

  • Signal Tower: search and AI-answer visibility.
  • Defense Tower: connection, hardening, and domain authenticity.
  • HEA owners open Defense Tower from the workspace after they sign in.
  • Typical credit use lists the Defense Tower check next to other Training Credit actions.

See how your site looks from the outside.

Create a HEA, open Defense Tower, and connect a website you own. A written Exposure report is about 0.15 Training Credits if the report is created.