Understand the finding.
Know the next step.
A practical security workspace and reference desk for business owners, website operators and the people who look after their technology.
Built around the decisions you need to make
CyberScan is designed for UK small and medium-sized businesses, with guidance that is useful to website maintainers and service providers elsewhere. The aim is to turn a technical observation into a clear question: what was seen, why might it matter, who can investigate it and how will you check the outcome?
The separate protected workspace combines verified-domain public checks with selected integrations for scanners you already use. Reports keep evidence, coverage and uncertainty together, with an executive summary, suggested first actions and comparisons against suitable earlier assessments.
The guided security review helps you consider areas a public website check cannot establish, including account protection, backups and incident preparation. It creates a plan from your answers without scanning your systems or claiming to verify your controls.
A reference desk alongside your reports
The knowledge hub follows the practical reference-desk idea behind AML.me.uk (opens in a new tab): dated briefings, clear guides and implementation steps organised around real work. CyberScan’s content applies that approach to website and domain security.
- News and briefings explain a dated development and its practical implications.
- Guides explain controls, scope and the evidence needed for a sensible decision.
- Implementation checklists help you plan a change, involve the right provider and verify what happened.
Evidence and scope stay visible
A public observation, a provider-reported finding and a verified fix mean different things. CyberScan preserves those distinctions. An unavailable check remains unavailable; a provider connection does not prove the target was tested after login; and marking an action as in progress does not change the original scan evidence.
The public baseline assesses a defined set of external settings. It does not provide a full vulnerability assessment, penetration test, certification or insurance decision. The scan comparison explains the current routes in detail.
Sources you can inspect
Articles link to primary sources, including the NCSC, government publications, standards and official product documentation. Briefings distinguish the article’s publication date from the underlying event or source update. Practical recommendations include scope and testing considerations, especially where a change can affect legitimate traffic or email.
The knowledge hub brings the collection together with topic filters, learning paths and a reading list saved on your device. Implementation checklists can remember your progress if you choose. The collection is curated; it is not a live threat feed, and no automatic news publication schedule is configured.
How guidance is prepared and maintained
Guidance is published under the CyberScan name. Preparation includes AI-assisted drafting and source checking. This beta does not claim review by a named accredited cybersecurity professional. Use the cited standards and your responsible provider when deciding how to change a live system.
Publication dates record when material was first added. An updated date is shown only after a substantive change. Examples are labelled synthetic where they are illustrative. Downloadable templates start blank and do not establish that a control has been tested or approved.
Source changes and material errors should prompt a review of affected guidance. The editorial process records the claim, source, actual change and remaining uncertainty. Significant corrections will be explained on the affected page. The current beta does not offer a public support or correction-response commitment.
The current release
The guides, checklists, guided review and synthetic sample report are available on this public website. Live checks, domain verification, scanner connections and saved reports remain in the existing owner-private workspace for authorised users. Its access controls and records have not moved to this website. Continuous monitoring, team administration and managed security services are not part of this release.
CyberScan is an independent resource. References to scanner providers identify integrations and documentation; they do not imply certification, endorsement or a commercial partnership.