Hardenize's free report is broad and good — but since the Red Sift acquisition, ongoing monitoring is the enterprise product. MySSL covers the same ground — SSL, headers, email and CT — and keeps the monitoring and alerts free and self-serve.
No card, no procurement, no demo booking — sign up and monitor.
Hardenize was acquired by Red Sift in October 2022. The free public report at hardenize.com is still there, and it's one of the more thorough free one-off reports around — TLS/HTTPS, security headers, email (SPF, DKIM, DMARC, MTA-STS, STARTTLS) and DNS. Credit where it's due: on breadth of a single report, Hardenize is excellent.
The difference is the ongoing part. Continuous monitoring, asset discovery and attack-surface management moved into Red Sift's enterprise, sales-led platform. If you're an individual, developer or a small-to-medium team who just wants the checks to keep running and to be alerted on changes — without a procurement process — that's exactly what MySSL does, for free.
| Capability | MySSL.info | Hardenize (Red Sift) |
|---|---|---|
| Broad one-off report (TLS + headers + email + DNS) | Yes | Yes |
| Price of the report | Free | Free |
| SSL/TLS grade (A+ → F) | Yes | Yes |
| Email auth (SPF / DKIM / DMARC / MTA-STS) | Yes | Yes — strong |
| Continuous monitoring + alerts | Free | Enterprise (paid) |
| Self-serve signup (no sales call) | Yes | Sales-led |
| Free self-serve JSON API | Yes (anon + free key) | Enterprise |
| Certificate Transparency log search | Yes (free) | Part of enterprise monitoring |
| Enterprise attack-surface management | Not our focus | Strong |
If you're a larger organisation that needs full attack-surface management — automated discovery of unknown assets across a big estate, org-wide inventory and enterprise support — Red Sift's Hardenize platform is built for exactly that, and it's genuinely strong. MySSL is aimed at the free, self-serve end: monitor the domains you already know about, get alerted, and script it.
Yes. Hardenize was acquired by Red Sift in October 2022. The free public report is still available at hardenize.com, while continuous monitoring and attack-surface management are part of Red Sift's paid enterprise platform.
The public report is free and genuinely broad — it covers TLS/HTTPS configuration, HTTP security headers, email security (SPF, DKIM, DMARC, MTA-STS and STARTTLS) and DNS/DNSSEC hygiene. It's one of the more comprehensive free one-off reports out there. MySSL is also free and covers the same ground, and additionally gives you scheduled monitoring and a self-serve API.
Free, scheduled monitoring with expiry and grade-drop alerts, and a self-serve JSON API on the free tier. Hardenize's free report is a point-in-time snapshot; its ongoing monitoring and asset discovery are Red Sift's paid enterprise tier. MySSL keeps the monitoring free and self-serve.
Red Sift and Hardenize are aimed at enterprise attack-surface management with sales-led onboarding, and they're strong there. MySSL is self-serve and free, which suits individuals, developers and small-to-medium teams who want monitoring and alerts without a procurement process.
Yes — its report covers SPF, DKIM, DMARC, MTA-STS and STARTTLS, and it's genuinely strong on email hygiene. MySSL also checks SPF, DKIM and DMARC (plus MTA-STS, DANE and BIMI) and can monitor them over time and alert on changes.
Hardenize's programmatic access is part of the paid Red Sift platform. MySSL offers a free JSON API — an anonymous tier plus a higher limit on a free key — and machine-readable llms.txt output for AI assistants and automation.
We're new and growing — your feedback helps us improve.