Vendifi Insights

Security posture and threat intelligence for the website you are viewing.

Vendifi Insights — Vendor Security Posture at a Glance Before you sign a contract, share data, or integrate with a new vendor, do you really know their security posture? Vendifi Insights gives you an instant, at-a-glance security assessment of any domain — right from your browser's side panel. How It Works Simply browse to a vendor's website and open the Vendifi Insights side panel. The extension automatically detects the domain you're viewing, strips subdomains to identify the registrable domain (e.g. vendor.co.uk from app.vendor.co.uk), and fetches a comprehensive security score from the Vendifi API — all in seconds. What Gets Checked Vendifi Insights evaluates a domain across two key areas: Email & DNS Security Checks DMARC — Is the domain protected against email spoofing and phishing? SPF — Does the domain publish a Sender Policy Framework record to prevent unauthorized mail senders? MTA-STS — Is strict transport security enforced for inbound email? SMTP TLS — Is email in transit encrypted? DNSSEC — Is the domain's DNS signed to prevent spoofing and cache poisoning? DNS Email (overall) — A rolled-up view of the domain's full email security configuration Threat & Breach Alerts Ransomware Incidents — Has this domain been listed as a victim by a known ransomware group? Includes incident details such as the threat actor, date discovered, and industry. Breached Credentials — Have employee credentials from this domain appeared in known data breaches? Shows breach sources, record counts, and date ranges. Your Overall Score Every domain receives an overall Insight Score (0–100) and a letter grade, giving you a single number to benchmark vendor security. Actionable recommendations are included so you know exactly what gaps exist and what the vendor should fix. Why Install It Vendor due diligence — Quickly assess a potential supplier, SaaS tool, or partner before onboarding Procurement support — Give procurement and InfoSec teams fast, consistent signal during vendor evaluation No configuration required — Just install and browse; the extension works automatically on any HTTP or HTTPS site Results are cached locally for 15 minutes so repeated lookups are instant without extra API calls Privacy-first — The extension does not read page content, inject scripts, access cookies, or track your browsing history; only the registrable domain name is sent to the Vendifi API Who Is It For? Security teams, procurement managers, IT leads, and anyone who needs to make fast, informed decisions about the vendors and third parties they work with. Whether you're evaluating a new SaaS platform, auditing your supplier list, or doing a spot-check during a sales call, Vendifi Insights surfaces the security signals that matter — without leaving your browser.