RookLens
Open Telegram
Scans are free. Monitoring is free during the beta.
Send RookLens your domain on Telegram. In seconds you get a plain-English security report, and the exact words to send your developer.
We copy the command for you. Paste it into the chat and RookLens takes it from there.
Type /scan and your address. Any public website works.
Before any check runs, RookLens asks whether you own the domain or have permission. One tap.
A score, the finding that matters most, and what to do about it in plain words.
/scan yourbusiness.com
Before I scan yourbusiness.com, I need to confirm: do you own this domain, or do you have permission to assess it?
Reply yes within 10 minutes to run the scan.
Confirmed. Running checks on yourbusiness.com...
yourbusiness.com
Worth a look
Score: 89/100
2 things to check
Anyone can still send emails pretending to be from your business. Most mail servers will still deliver them.
SPF uses softfail for yourbusiness.com
Fix: Ask your email provider to reject unauthorized mail strictly.
For your developer: change ~all to -all in the SPF record.
7 passed, 2 to review, 0 failed.
RookLens looks at the public setup of your domain, the same things a customer, a browser or a scammer can see.
RookLens reads your SPF and DMARC records and confirms your domain can receive mail.
v=spf1 include:_spf.google.com ~allsoftfailv=DMARC1; p=nonewatching only10 mx.yourbusiness.comreceiving mailCertificate validity and expiry, checked against the real handshake.
Four headers that protect visitors. Tap one to see how the count changes.
2 of 4 present
HTTPS response, speed, and whether plain http sends people to the safe version.
HTTPS responds in 209 ms
The address records that turn your name into a server.
203.0.113.102001:db8::10Resolves
The plain-language fix comes first. The exact technical detail comes second, labeled for whoever manages your website.
Fix: Ask your web host to add the missing security headers.
For your developerstart with HSTS. Set Strict-Transport-Security to max-age=31536000; includeSubDomains.
An early tester told us she understood nothing. So every finding now leads with what it means for your business, and the technical detail moves to the end, labeled for your developer. Drag to compare.
FAIL dns.spf Record v=spf1 include:_spf.google.com ~all Qualifier "~" yields SoftFail per RFC 7208. Severity MEDIUM Remediation Replace ~all with -all.
Anyone can still send emails pretending to be from your business. Most mail servers will still deliver them.
SPF uses softfail for yourbusiness.com
Fix: Ask your email provider to reject unauthorized mail strictly.
For your developer: change ~all to -all in the SPF record.
RookLens remembers your last scan and tells you what changed. Hand the developer section to whoever manages your site, then check their work in one message.
Worth a look
3 things to check.
Free during the beta
Send /monitor with your domain. Every week RookLens rechecks it and only speaks up when something gets worse. Acknowledge an alert, snooze it, or reset what counts as normal after a change you made on purpose.
/monitorwatch a domain every week/alert_settingschoose how you hear about changes/ackacknowledge an alert/snoozepause an alert for a while/reset_baselinerelearn what is normal/unmonitorstop watchingMonitoring will become a paid plan after the beta. You will see the price before anything changes.
Monitoring yourbusiness.com.
State: active
Last checked: this week
Next check: in 7 days
Send /unmonitor to stop.
Example timeline.
A security tool has to earn trust before it asks for any. These are the rules RookLens works by.
RookLens only reads what any visitor can already see. It never logs in, never changes a setting, never touches your files.
Every scan starts with a question: do you own this domain or have permission to assess it? No answer, no scan.
Addresses are validated and pinned, so the scanner cannot be steered at private or internal networks. Public https sites only.
Reports are deleted automatically after 90 days. Send /delete_data and everything stored about you goes right away.
A RookLens report is a snapshot of public information. It is not a penetration test or a guarantee of safety.
Send /export and a scan ID. Pay $9 once with PayPal and both the PDF and the Markdown file unlock for that scan. Use the PDF to forward to your developer or print for a meeting, and the Markdown to paste into a ticket or your notes. Your card details stay with PayPal.
Send /referal to get your link. When someone joins with it and buys a report, you each get one free.
Score: 89/100
| Status | Check |
|---|---|
| OK | DNS records configured correctly |
| WARN | Email sender rules (SPF) set |
| OK | Email fraud protection (DMARC) set |
| OK | Incoming mail configured |
| OK | TLS certificate valid |
| OK | Certificate expiry healthy |
| OK | Website reachable |
| WARN | Security headers reviewed |
Generated by RookLens. A public-surface snapshot, not a penetration test.
# RookLens report for yourbusiness.com **Status:** Worth a look **Score:** 89/100 ## Checklist | Status | Check | |---|---| | OK | DNS records configured correctly | | WARN | Email sender rules (SPF) set | | OK | Email fraud protection (DMARC) set | | WARN | Security headers reviewed
The goal is simple: keep your business safe without asking you to become a security expert.
Want something else first? Send /feedback in the chat and say what.
No. Findings are written for business owners. Each one ends with a technical line your developer or hosting provider can act on.
Yes. RookLens only reads public information, asks you to confirm ownership first, and never changes anything on your site.
Only with their permission. Before every scan RookLens asks you to confirm that you own the domain or have permission to assess it.
Scanning is free. Monitoring is free while RookLens is in beta and will become a paid plan later. PDF and Markdown exports cost $9 per scan. You always see the price before you pay.
When you ask for an export, RookLens shows the price and a PayPal button. You pay on PayPal's own checkout page, so your card details never reach RookLens. Send /billing in the chat to see your payments.
Send /monitor with your domain and RookLens rechecks it every week. It messages you when something gets worse, and you can acknowledge the alert, snooze it, or reset what counts as normal. Send /unmonitor any time to stop.
Yes. RookLens lives in Telegram, which is free on phones and computers. There is no dashboard and no account to create.
The domains you scan, the reports, and your Telegram ID, so you can look up past results. Reports are deleted after 90 days, and /delete_data removes everything about you immediately.
No. It checks the public setup of your domain: address records, email records, the certificate and the security headers. It does not read your pages.
No. A RookLens report is a point-in-time snapshot of public information. It is not a certification or a guarantee that your business is safe.
It takes one message. Type your address, and we copy the command for you.
On a computer? Scan with your phone to open the bot.