Red Bridge Cyber - our own site
What good looks like for a small Australian business that takes its public-facing posture seriously. We run our own product against our own site, every day.
What to watch for
- Email category - SPF, DKIM, DMARC at reject, MTA-STS and TLS-RPT all in place.
- Domain category - DNSSEC enabled, CAA published, certificate auto-renewing.
- Security category - HSTS preloaded, CSP enforced, no version disclosure.
- Visibility category - schema, sitemaps, AI-search citation surface all configured.
- Even a clean sweep still leaves a list - ours flags unused JavaScript and OCSP stapling.