# ShieldCheck (https://shieldcheck.my)

> Free passive email and website security checks, and independent comparisons of security tools, for Malaysian small businesses. We sell no services. Revenue comes from disclosed affiliate/referral links (rel="sponsored", labelled on the page) and, later, vendor directory listings. Commissions never change rankings; comparisons list options in alphabetical order with published criteria.

Scope of the free tools: passive only. They read public DNS records (MX, SPF, DKIM at common selectors, DMARC, BIMI, MTA-STS), check the HTTP to HTTPS redirect and TLS certificate, and read security response headers from one normal GET request. No port scanning, crawling, fuzzing, login attempts or vulnerability probing. Generators run fully in the browser.

Not affiliated with NACSA, CyberSecurity Malaysia, MCMC, JPDP or any vendor. Educational pages are not legal advice.

## Tools
- [Free email security check](https://shieldcheck.my/tools/email-security-check/): Free passive check of your domain's MX, SPF, DKIM, DMARC, BIMI and MTA-STS records, with a plain-English grade and how to fix each issue.
- [Free website security check](https://shieldcheck.my/tools/website-security-check/): Free passive check of your website's HTTPS redirect, TLS certificate expiry and issuer, and HTTP security headers, with a grade and fixes.
- [DMARC record generator](https://shieldcheck.my/tools/dmarc-record-generator/): Build a valid DMARC TXT record for your domain: policy, subdomain policy, report address and alignment. Runs fully in your browser.
- [SPF record generator](https://shieldcheck.my/tools/spf-record-generator/): Build one valid SPF TXT record for Google Workspace, Microsoft 365, Zoho Mail and your own servers, with a DNS lookup counter.

## Comparisons
- [Best business email for Malaysian SMEs](https://shieldcheck.my/best/business-email-malaysia/): Google Workspace, Microsoft 365, Zoho Workplace and Proton compared for Malaysian SMEs: security features, published prices and who each suits.
- [Best DMARC monitoring tools for small businesses](https://shieldcheck.my/best/dmarc-monitoring-tools/): Free and paid DMARC report tools compared: Cloudflare, dmarcian, EasyDMARC, Postmark and Valimail. Published prices and limits.
- [Best website firewall and malware protection for SMEs](https://shieldcheck.my/best/website-firewall-malware-protection/): Cloudflare, Sucuri, Wordfence and Patchstack compared: web application firewall, malware cleanup, published prices and who each suits.
- [Best password managers for business](https://shieldcheck.my/best/password-managers-for-business/): 1Password, Bitwarden, Keeper and Proton Pass compared for Malaysian small businesses: sharing, admin controls, published prices.
- [Web hosting in Malaysia: security features compared](https://shieldcheck.my/best/web-hosting-malaysia-security/): Exabytes, Hostinger, ServerFreak and Shinjiru shared hosting compared on security: SSL, WAF, malware scanning, backups, data centre.
- [Best backup solutions for small business](https://shieldcheck.my/best/backup-solutions-small-business/): Acronis, Backblaze and IDrive compared for Malaysian SMEs: ransomware protection, encryption, versioning and published prices.

## Guides
- [SPF, DKIM and DMARC setup guide for Malaysian SMEs](https://shieldcheck.my/guides/spf-dkim-dmarc-setup/): Step-by-step SPF, DKIM and DMARC setup for Malaysian business domains, with example records for Google Workspace, Microsoft 365 and Zoho.
- [Website security headers explained](https://shieldcheck.my/guides/security-headers/): What HSTS, CSP, X-Content-Type-Options, frame-ancestors, Referrer-Policy and Permissions-Policy do, with safe starting values and how to add them.
- [Email spoofing and invoice scams in Malaysia: how to protect your business](https://shieldcheck.my/guides/email-spoofing-invoice-scams-malaysia/): How invoice and payment scams by email work in Malaysia, warning signs, how to protect your business, and what to do: call NSRC 997.
- [PDPA Malaysia security checklist for SMEs](https://shieldcheck.my/guides/pdpa-malaysia-security-checklist/): A plain-English PDPA 2010 security checklist with the 2024 amendments: breach notification in 72 hours, DPO thresholds, processors' duties. Cites JPDP.
- [Cyber Security Act 2024 (Act 854): what SMEs need to know](https://shieldcheck.my/guides/cyber-security-act-2024-what-smes-need-to-know/): What Malaysia's Cyber Security Act 2024 (Act 854) means for SMEs: NCII sectors, licensing of security providers, and practical steps. Cites NACSA.

## About
- [About ShieldCheck](https://shieldcheck.my/about/): Who runs this site, why the tools are free, and how we make money from disclosed affiliate links, never from selling services.
- [Methodology](https://shieldcheck.my/methodology/): Our selection criteria, alphabetical ordering, sourcing rules for prices and features, and how the free tools calculate their grade.
- [Affiliate disclosure](https://shieldcheck.my/disclosure/): How this site earns money: marked affiliate and referral links, possible vendor listings later. Rankings never depend on commission.
- [Privacy](https://shieldcheck.my/privacy/): No cookies, no analytics, no trackers and no sign-up. What happens to a domain name you type into our free checkers.