About
ThreatScope Check is an independent public-interest trust-signal triage tool for reading selected domain-layer signals from the outside.
ThreatScope Check helps governance, risk, digital trust and technical readers inspect selected public signals for one domain at one point in time.
It focuses on four public assessment areas - DNS hygiene, email authenticity, web delivery and registration visibility - with certificate history retained as supporting context. These signals do not tell the whole story, but they can make a domain’s visible public trust posture easier to inspect and discuss.
ThreatScope Check is owned and stewarded by Bryan Chetcuti, who holds responsibility for product direction, methodology, public documentation, Provider Catalogue governance and corrections.
The Vigo Group currently provides operational infrastructure and service support under a replaceable arrangement. This operational role does not make ThreatScope Check a Vigo Group product or confer authority over its methodology or findings.
The result opens with the bounded conclusion, attention state and evidence coverage for the point-in-time check.
Findings should be read alongside the visible evidence, source diagnostics, coverage information and limitations. Each collection path notes whether a signal was observed, authoritatively absent or unavailable at check time - an unavailable source is a limit of visibility, not a mark against the domain.
The service does not log in, probe internal systems, verify internal controls or provide assurance.
Use Contact & feedback to report a bug, edge case or unexpected result. Source diagnostics help distinguish unavailable evidence from negative posture.
Results are deliberately plain-English, evidence-led and limitation-aware. They help frame better follow-up questions without creating scores, ratings, certification claims or safety guarantees.
ThreatScope Check works from observable public evidence. It does not rely on privileged access, and it should not be treated as a replacement for technical review or formal assurance.
ThreatScope Check is built with .au context in mind, but it is not limited to .au domains. It provides a point-in-time reading for one domain.
Related work through .auDO observes public signals across a curated .au panel over time. ThreatScope Check does not use .auDO data to produce results.
ThreatScope Check surfaces public domain-layer signals. It does not determine whether an organisation is well governed. For a practical governance conversation, the Domain Governance Baseline provides a separate self-assessment around ownership, accountability and visible public signals.
Run a check, read the method and limits, inspect the Provider Catalogue, use Contact & feedback, review the privacy notice, or see the latest public release notes.
