Security · Marketing · AI Visibility Audit
Paravane scans your domain in seconds, surfaces every security gap, marketing weakness, and AI-visibility blind spot, and deploys agents that fix them — before they cost you customers, credibility, or sleep.
Scan Free →Free scan · 26 checks · no signup to see your scores
The Problem
Most small business websites have critical gaps sitting in plain sight. You're not hacked yet. But the door is unlocked.
Without DMARC and SPF records, scammers can send emails that look exactly like they came from you — to your clients, your vendors, your bank. You won't know until the damage is done.
Buyers now ask ChatGPT, Claude, and Perplexity for recommendations first. A blanket rule in your robots.txt, no structured data, and no business-identity markup means those assistants can't read you, can't verify who you are, and quietly recommend a competitor instead.
No sitemap. No robots.txt. No meta descriptions. Your marketing spend is evaporating because the technical foundation that makes search engines work isn't there.
How it Works
Enter your domain. Paravane runs 26 checks across security, marketing, and AI visibility in seconds. No account required.
See three scores, a clear picture of every problem, why it matters, and exactly what it costs to fix. No jargon.
When you approve the scope, our remediation agents execute the fixes, verify results, and lock it down.
Why Paravane
A paravane is towed ahead of a ship to cut mines loose before they reach the hull. iGloo Digital Services has spent years doing the same thing for small business websites: a spoofed email destroys a client relationship overnight, a missing sitemap tanks months of SEO work, and a robots.txt written before 2023 quietly locks every AI assistant out of your business.
Paravane runs ahead of the threat — scanning, identifying, and deploying autonomous agents to fix problems before bad actors, Google penalties, or customer distrust find them first.
The Full Audit
Every check below is one Paravane actually runs on your domain. Nothing here is aspirational — this is the catalog.
Authorizes which servers may send mail on behalf of your domain.
Confirms the policy rejects unauthorized senders outright instead of merely flagging them.
Tells receiving mail servers how to handle messages that fail authentication.
Detects a policy stuck in monitor-only mode, where abusive mail is watched but never blocked.
Restricts which certificate authorities are permitted to issue SSL certificates for you.
Cryptographic signing of your DNS so responses can't be forged in transit.
Verifies insecure visitors are forwarded to the secure version of your site.
Instructs browsers to only ever connect to your site over HTTPS.
Finds assets still loading over insecure HTTP inside an otherwise secure page.
Whitelists where scripts, styles, and other content may load from.
Controls whether other sites may embed your pages inside a frame to trick visitors.
Stops browsers from second-guessing — and mis-running — the file types you serve.
Limits how much browsing context leaks to third parties when visitors click away.
Detects response headers advertising exact software versions that help attackers.
Confirms your domain is configured to reliably receive email at all.
Gives search engine crawlers the guidance they need about what to crawl.
Lists your pages so search engines can discover them efficiently.
Supplies the homepage summary search engines display under your listing.
Checks whether the assistants people ask for recommendations are allowed to read you at all.
A plain-text index at your site root pointing AI assistants at the pages you want cited.
Machine-readable JSON-LD so AI systems are told what your business is instead of guessing.
The organization block stating your name, site, and contact details rather than implying them.
Declares which URL is authoritative so duplicate versions don't compete with each other.
The headline every search engine and AI system reads first.
A single top-level heading machines can anchor on to understand the page.
Open Graph tags so your links render with a title, description, and image when shared or cited.
The free scan gives you all three scores and tells you which checks failed. A short email unlocks the detailed findings. The full remediation playbook — the exact records, headers, and files to change — is where our team takes over.
What's at stake
A spoofed email from "you" tricks a client into wiring money to a fraudster. You find out when they call, furious, having lost $12,000.
A buyer asks an AI assistant who to hire in your category. Your site is unreadable to it, so it names three competitors and never mentions you.
Google updates its algorithm and your site drops to page 3 — because you had no sitemap, no meta descriptions, and no crawl guidance at all.
A visitor sees a browser warning that your site "may not be safe." They leave. They don't come back. They don't tell you why.
of cyberattacks target small businesses — and 60% of those businesses close within six months of a breach.
average cost of a data breach for a small business — most of which was preventable with basic security hygiene.
The Other Side
DMARC enforcing, SPF hard-failing, MX and CAA correct. Your emails reach inboxes. Nobody can fake being you. Your reputation is protected at the infrastructure level.
Sitemap published. robots.txt written deliberately. Meta descriptions in place. Search engines can discover, crawl, and correctly represent the pages you were already paying to promote.
Assistants allowed in, llms.txt pointing at your best pages, structured data and identity schema stating exactly who you are. When someone asks ChatGPT or Claude for a recommendation, you're citable.
Paravane's agents connected to your DNS provider, made the changes, verified propagation, and invoiced you on completion. You approved the scope. Everything else was handled.
From the Field
"Our DMARC was sitting in monitor-only mode and our SPF let anything through. I had no idea. Paravane flagged both in the first scan and iGloo had the records corrected the same day. I didn't have to do a thing."Operations Director — Professional Services
"We'd been spending $3,000 a month on Google Ads and getting mediocre results. Turns out we had no sitemap, no meta descriptions, and a robots.txt blocking half the site. Fixed all three. Leads doubled in 60 days."Owner — Medical Practice
"The report showed exactly what was wrong, what it would cost, and what it would look like when it was fixed. It felt like having a technical co-founder who actually explained things."Founder — B2B SaaS Company
Questions
If you have a unique setup, a custom tech stack, or just want to talk to a human before giving an agent access to your DNS — reach out. Our technical team is ready to review your infrastructure.
Yes. The scan is always free. You get security, marketing, and AI-visibility scores with severity ratings and a total cost estimate — no credit card, no account, no catch. You only pay if you choose to have the problems fixed.
It reads publicly available information — DNS records, HTTP responses, and page content — the same way Google or any visitor would. It does not touch your database, files, or backend. It's entirely read-only.
It measures whether AI assistants can actually read, understand, and cite your business. Eight of the 26 checks cover crawler access, llms.txt, structured data, identity markup, canonical URLs, titles, headings, and link previews. Buyers increasingly ask an assistant before they ask Google, and most small business sites are invisible to them.
We provide a secure credential form after you contract with iGloo. Your API token is encrypted and used only during the active job. It is never stored in plaintext and never accessed outside the remediation window.
The agent escalates to our technical team with a full log of what it tried, what it needs, and exactly where it stopped. We resolve the blocker, provide the input, and the agent resumes. You're notified at every step.
Cloudflare, GoDaddy, Namecheap, HostGator, and Bluehost — which collectively cover the vast majority of small business domains. If your provider isn't on the list, we handle it manually at the same price.
DNS fixes typically propagate within 24–48 hours. Most jobs are fully complete within 3–5 business days. You receive an invoice only after we've verified each fix is live and working.
Takes under 60 seconds · No credit card · Instant report