Know what is wrong: your email, your site and your rivals

Some problems arrive with a noise: a client phones, a page will not load, a payment fails. The dangerous ones make no noise at all. They sit there until someone else finds them.

This post is about three of those. Two are about your own business: your email setup and your website. The third is about other people's: what your competitors are publishing. For each, we explain what to look at, what it means in plain words, and where a person has to decide.

Your email: can anyone send mail as you?

Email was designed in a time when nobody checked who a message came from. Anyone can send an email that looks like it came from your domain. Whether mail programs believe it depends on a few records on your domain, set up once, often years ago, and rarely looked at since.

Three things are worth knowing:

• Whether anyone can send mail as you. If your records are missing or too loose, a message pretending to be you may reach your clients. They may trust it, because it carries your name.
• Whether lookalike domains exist. Someone registers a domain that differs from yours by one letter, to imitate you.
• Whether your staff addresses appear in data breaches. When a service your staff used is breached, their addresses turn up in lists. You want to hear about it before someone uses them.

None of this needs you to understand email. It needs someone to look.

Your website: the things that expire quietly

A website has parts with expiry dates, and nobody puts them in a diary.

• Certificates. The small file that puts the padlock in the browser. When it expires, visitors see a warning instead of your site. A certificate that runs out on a Sunday is a classic.
• Your domain. Registrations expire as well. Losing one is rare and serious.
• Security headers. Settings your site sends to browsers. They are graded, and a poor grade means easy protections are switched off.
• Whether Google lists your site as unsafe. If it does, visitors are warned off, often before you know.

Each is easy to fix once someone sees it. The trouble is only that nobody is looking.

What a good finding looks like

A report full of technical terms is no use to an owner. A good finding has three parts: what it is, in plain words; why it matters to you; and the exact fix, often a record to paste or a setting to change. Then it is checked again after you fix it, so you know it worked.

A short list is better than a long one. If ten things are wrong, you want to know which two come first.

What a system can check, and where it stops

An AI system suits this work because it is repetitive and public. Our digital security service checks your email setup and your website every day, says what is wrong in plain words and gives the exact fix. A short brief arrives on Monday listing what to fix first, sent to the people you choose. Staff can also forward a suspicious email to an address of yours, and you get a verdict with the reasons.

The limits are deliberate:

• It reads public information only, about domains you have proved are yours: DNS records, certificates and registrations. A record on your domain proves it. Nothing is checked before that.
• It never scans your servers and never opens a link in a reported email.
• It does not fix things behind your back. Every report waits for a person to decide, and you see any reply before it goes out. If you would rather not touch a fix, we do it with you on a call.

It also cannot promise that you are safe. It tells you about what is visible from outside. That is a useful part of the picture, not the whole of it.

The third thing: what others are doing

The last problem is of another kind. A competitor lowers a price, launches a service or writes about your market. You find out weeks later, when a client mentions it.

The answer is a habit: read what competitors publish, regularly. Nobody has time to read ten blogs a week, so most owners do not.

Our competitor watch does the reading. You give it a name and a web address for each competitor. It finds their blog or feed, reads new posts every day and keeps each one with a short summary and a link to the original. Once a week it writes a short brief of the points that matter, using what you have told it about your own business, and emails it to the people you choose.

Again, the limits matter. It reads public pages and feeds. It never writes to or emails a competitor. If a site cannot be read, the page shows the reason, so a quiet week is not mistaken for a quiet competitor. And a brief tells you what was published, not what a competitor intends. What to do about it is yours to decide.

Make it a Monday habit

Both services end up as a short weekly read: what to fix, and what others said. That is much easier to keep than a check you must remember. You can read about them on the digital security page and the competitor watch page. If you run AI agents of your own and want the same for them, see how to know when an AI agent breaks.

To talk through what is worth checking in your business, book a call.