Turn security gaps into a sales conversation.
Built for MSP prospecting, Hookgap checks a prospect's email and website security in under a minute. Turn security gaps into a branded report with your MSP's name on it, and start a sales conversation today.
Prepared by Northline IT
harborview-dental.example
Anyone can send email pretending to be @harborview-dental.example.
- No DMARC recordUrgent
- Website certificate expires in 9 daysImportant
- Sender list too long to work (12 lookups)Important
Book a 15-minute review with Northline ITOpen full report
41 of 64
law, dental and accounting firms we checked in Columbus, Ohio had no DMARC record. Anyone could send email pretending to be them.
Passive DNS check of 64 firm websites listed in OpenStreetMap, October 2026. Only 8 of the 64 enforced DMARC. Small sample, one city.
From domain to booked call
- Step 1
Check a prospect
Type a domain, or paste a list of fifty. Each check reads 14 public settings in under a minute.
- Step 2
Put your name on it
Your logo, colour, phone number and booking link go on every report. No Hookgap branding on paid plans.
- Step 3
Send something useful
Share a link or a PDF, with a ready-made email, LinkedIn note and 60-second Loom script that mention their real gaps.
- Step 4
Hear when it changes
Watched domains are rechecked every week. A certificate about to expire or a new email gap is your reason to follow up.
Passive by design
Safe to run before anyone signs anything. Hookgap reads what the internet already publishes about a domain and nothing more.
See every check- Email spoofing
- DMARC, SPF and DKIM
- Email in transit
- MTA-STS and TLS reporting
- Website
- HTTPS, redirects and security headers
- Certificates
- Expiry dates from public logs
- DNS
- DNSSEC and certificate rules (CAA)
- Domain
- Registration expiry and exposed software versions
Priced for the MSP that answers its own phone
Compare plansFree
Try it on real prospects.
$0
- 10 reports a month
- Share link and PDF
- Hookgap watermark
- 3 watched domains
Solo
For the one-person MSP.
$39/month
- 150 reports a month
- Your logo, colours and booking link
- Bulk check 50 domains at once
- 50 watched domains, weekly rescans
- Slack, Teams or Discord alerts
- Outreach email and Loom scripts
Team
For MSPs with a small sales team.
$99/month
- 600 reports a month
- Everything in Solo
- Bulk check 200 domains at once
- 250 watched domains
- 3 seats
Questions MSPs ask first
Is it legal to check a prospect's domain?
Hookgap only reads information that is public by design: DNS records, public certificate logs and the homepage, the same requests any mail server or browser makes. It never scans ports, tries logins or tests for vulnerabilities.
How is this different from MXToolbox?
MXToolbox shows raw records to technicians. Hookgap turns the same public data into a plain-English report a business owner understands, puts your brand on it, checks many domains at once and tells you when something changes.
How is this different from Client Posture?
Client Posture is a strong product for established MSPs and starts at $199 a month. Hookgap is built and priced for MSPs with one to ten people, with change alerts included from $39 a month.
Does it use AI?
No. Every check is deterministic and every sentence comes from reviewed templates, so a report never invents a problem.
Can I cancel any time?
Yes. Monthly plans can be cancelled at any time from your billing page, and you keep access until the end of the period.
Check the first prospect on your list.
Three free checks a day without an account. Sign in to brand reports and save them.
Check a domain