Is your business easy to hack?
Type your website address. In about a minute we'll show you what criminals can see, in plain English, and how to fix it. Then we keep watch for you.
FreeNo sign-upTakes a minute
What we check, in words you'll understand
The same things criminals look for when they pick a target. Each one comes with a fix you can actually do.
How it works
Three steps, and only the first one needs you.
Type your website address
No downloads and nothing to install. We only look at what's already visible from the internet.
Get red, amber or green
The top three things to do, who should do each one, and the exact steps for your own providers.
We keep watch
Automatic re-checks, same-day warnings about new threats, and a short monthly report. You only hear from us when something needs you.
Not sure about an email? Forward it.
Send anything suspicious to check@shield.nimbosoft.co.uk. A minute or two later you get a straight answer: scam, be careful, or looks genuine, with the reasons and what to do next.
It catches fake invoices, "change of bank details" emails, HMRC and courier scams, and fake messages from your boss or supplier.
- Sent from harbour-supp1ies.co.uk, not harboursupplies.co.uk
- Pressure to pay "today, before the account closes"
- Don't pay or reply.
- Ring the supplier on a number you already have.
- Forward it to report@phishing.gov.uk.
Not just "fix your DMARC". The exact clicks.
Most security tools give you jargon and leave you to it. We work out who runs your domain and email, then show the steps for your provider and the exact text to paste.
- GoDaddy, 123-reg, IONOS, Hostinger, Cloudflare, Namecheap and more
- Microsoft 365, Google Workspace, Zoho
- Or one button sends it all to your web designer
Add one record. It takes about five minutes.
Your domain is with GoDaddy. Log in, open My Products, find your domain and choose DNS. Press Add New Record and fill in:
TXT
Name_dmarc
Valuev=DMARC1; p=quarantine; adkim=r; aspf=r
New threat on Tuesday? You hear on Tuesday.
Every morning we download the latest lists of security holes being used by criminals and compare them with what your website runs. If you're affected, we email you that day, with what to ask your web host.
No rescanning, no waiting for next month's report.
A new security problem was announced today, and it looks like it affects your website.
Your website's programming software needs updating
Attackers are actively exploiting a new PHP hole. Ask your web host to update to the latest version today.
Show customers you take it seriously
Members get a "Security monitored" badge for their website and a one-page security summary PDF to hand to insurers, banks and big clients when they ask what you do about cyber security.
The badge never shows your results, only that you're watched over.
Simple prices. Cancel any time.
From about £2 a week. Security tools made for big companies cost hundreds a month; this one is built for you.
Free
Try it and fix the basics yourself.
- Check 1 website whenever you like (once a day)
- Leaked password checker
- "I've been hacked" step-by-step help
- 3 scam checks or assistant questions a month
Essentials
One website, watched for you every week.
- 1 website watched every week
- Same-day alerts when a new threat affects you
- Tells you if your website goes down
- Reminders before your domain name or certificate runs out
- 25 scam checks or assistant questions a month
- Monthly plain-English report
Business
Most small firms: daily checks and done-for-you extras.
- Everything in Essentials
- 3 websites checked every day
- Open-door check (finds risky things left open on your server)
- Cyber Essentials readiness helper
- Send fixes straight to your web designer
- 75 scam checks or questions a month
Pro
Several websites or brands.
- Everything in Business
- 10 websites
- 250 scam checks or questions a month
- Priority email help
Need more scam checks or questions? 25 extra for £3, and they never expire.
Free tools, no sign-up
Use them as often as you like.
Is this email a scam?
Paste in a suspicious email or text and get a straight answer.
Check an email →Can someone fake your emails?
Check your SPF, DKIM and DMARC, with the exact fix for your provider.
Check my email →Has my password been leaked?
Checks billions of leaked passwords without your password leaving your device.
Check a password →Cyber Essentials checklist
12 plain questions and a step-by-step plan for the government-backed certificate.
Take the checklist →I think I've been hacked
Calm, step-by-step help for money lost, email taken over, ransomware and more.
Get help now →Questions people ask
Do I need to be technical?
No. Everything is written in plain English, and each problem comes with the exact steps for your own provider (GoDaddy, Hostinger, Microsoft 365 and so on). Anything that needs a web designer can be sent to them with one button.
Will you try to hack my website?
No. The free check only looks at what any visitor can already see. Deeper checks only run once you prove the website is yours, and they only look; they never change anything.
Do I need to install anything?
No. It all works from your web browser and email, on a computer or phone.
What happens after the free trial?
You get 14 days of any paid plan without giving card details. If you don't add a card, you simply go back to the free plan. Nothing is charged.
How does "forward a dodgy email" work?
Members forward any email they're unsure about to check@shield.nimbosoft.co.uk. Within a minute or two we reply: scam, be careful, or looks genuine, with the reasons and what to do.
Does this mean I can't be hacked?
No service can promise that, and you should be wary of any that does. We find the common problems criminals look for, show you how to fix them, and keep watch so you hear about new ones the same day.
Can I cancel?
Yes, any time, in two clicks from your account. You keep the free plan afterwards.
Who is behind Nimbo Shield?
Nimbosoft, a UK software company that builds systems for small businesses. We never sell your data, and our privacy page explains exactly what we keep and why.
Find out where you stand in a minute
Free, no sign-up, and nothing to install.