Product
External security, explained and documented
Värn looks at your organisation from the outside, the way an attacker or a new customer would – and tells you in plain language what needs doing.

Monitoring
Passive checks of everything visible from the outside
Once verified, your domains and websites are assessed automatically on your schedule. Changes are compared with the previous scan so you can see what has happened.
- TLS, certificates and encrypted connections
- Security headers such as HSTS and Content-Security-Policy
- SPF, DKIM, DMARC, MX, CAA and DNS changes
- Strict scope: only verified domains, only permitted redirects

Findings and fixes
Prioritised, understandable and traceable
Every finding has a severity, a confidence level, technical evidence and numbered remediation steps. When the issue is gone, the finding closes automatically.
- Tells missing safeguards apart from confirmed vulnerabilities
- Assign an owner, comment and follow the history
- Accept a risk with a reason – kept in the log
- No duplicates: the same issue is always the same finding

Data breaches · coming soon
Find out when your accounts appear in known breaches
Monitoring is built but not switched on yet. Once it launches, Värn checks verified domains against Have I Been Pwned and shows which accounts are affected, what data was exposed and what you should do.
- Only for domains you have proved you control
- Passwords and leaked content are never stored
- A clear status while the integration awaits approval
- A concrete checklist for affected accounts

Reports
Documentation that stands up to scrutiny
Create a security report with one click. It is based only on recorded observations, states its limitations and is stored unchanged with a checksum.
- Management summary and risk register
- Separates confirmed observations, assessed risks and checks not assessed
- Mapping to NIS2, GDPR and ISO 27001
- Print and PDF with one click
Included in every plan
19 checks in six areas
Encrypted connection
- HTTPS available
- TLS protocol version
- HTTP to HTTPS redirect
Certificate
- Valid TLS certificate
- Certificate expiry
Security headers
- HSTS (Strict-Transport-Security)
- Content Security Policy
- X-Content-Type-Options
- Framing protection (clickjacking)
- Referrer-Policy
- Version information in response headers
Cookies
- Cookie security attributes
Email security
- SPF (Sender Policy Framework)
- SPF – DNS lookup count
- DMARC
- DKIM
DNS
- MX records
- CAA records
- DNS snapshot
On the way
Planned for upcoming versions
We are open about what does not exist yet. None of this is included today.
Data breach monitoring
Built and ready. Launches once the agreement with the data source is in place.
Secure vault
Sharing of sensitive information – only after an independent review.

