Changelog
What's new in Hookgap.
- A fresh, lighter design across the whole site and dashboard: new type, cleaner cards, a simpler scan bar, a monthly/yearly price toggle and a better mobile layout.
- Upload your logo (PNG, JPG or WebP). Hookgap stores it, so branded reports no longer depend on another website.
- New blog with seven practical guides: DMARC prospecting, the SPF 10-lookup limit, Google, Yahoo and Microsoft sender rules, DMARC policies, a local DNS study, choosing a prospecting tool, and MTA-STS setup.
- Subdomains are now checked on their own: website, SSL and headers for the exact host, email settings for the domain that actually handles its mail.
- New SSL details on every report: issuer, validity dates, covered names, wildcard, automatic renewal and revocation status.
- New checks: untrusted certificates, HSTS strength, unsafe inline scripts in CSP, mixed content, cookies without Secure, security.txt, and domain transfer lock.
- Reports now show scores for Email, Website & SSL and Domain & DNS, plus registrar, domain age, DNS host, CDN and website platform.
- Bulk check: DMARC and SSL columns, summary stats, filters, retry failed, watch selected, and a richer CSV export.
- Hookgap launches: passive security-gap reports, branding, outreach kit, weekly watchlist with Slack, Teams and Discord alerts, and bulk checks.