Your security.
A clear next step.
Verify your company email, then choose a free website baseline or speak to TGG about a deeper security or AI protection assessment.
From a first configuration check to a professional assessment and practical guidance.
Your email sets the domain. You choose where to begin.
Your email chooses your website.
Use an email on the domain you want checked. Verify your email and add an authenticator app for two-factor protection. Your email sets the website domain for you.
you@company.comcompany.com
Gmail, Outlook and other shared or disposable email addresses cannot request checks. Use a working mailbox on your own domain.
Used TGG before the login update? Activate your updated account with the same email to keep your reports, then set up your authenticator.
You can keep the main domain or add a subdomain such as www or app after signing in.
Check queued
Your Stage 1 baseline report
Passed means a specific limited condition was met. Observed means a policy was present; its effectiveness was not assessed. No review items is not a clean bill of health for the application.
Outside this check
Talk first. Agree the scope. Then begin.
TGG is your point of contact for security and AI protection. Tell us what matters to your business. We’ll discuss your needs and propose the work and fee before you commit.
- Discuss your needsSend an enquiry below or speak to TGG first. The free baseline is optional.
- Verify your domainAdd one DNS TXT record, now or after we speak. It is required before we issue an invoice or start testing.
- Approve the scope and feeReview the exact targets, work, exclusions and timing. Only then does TGG manually issue your crypto invoice.
- Payment, work and your reportAfter TGG confirms payment and rechecks DNS, we carry out the agreed work. Your full report arrives as an encrypted PDF by email. Keep its separate report key safe.
Verify your company email above to keep your enquiry, DNS verification and report in one private account. You can contact TGG before registering.
Verify domain control with DNS
Add this TXT record in your domain’s DNS settings. Keep existing website and email records. DNS changes can take time to appear.
- Type
- TXT
- Name / host
- Full record name
- Value / content
- TTL
- Auto or 300 seconds
Most DNS providers append your domain to the host name automatically. If your provider requires the full name, use the full record name shown above. TXT records do not change where your website or mail is hosted.
Keep the record until the assessment starts. TGG checks it again before invoicing and before work. Domain control alone does not authorize testing of third-party services.
Your final report, delivered by email
The full paid report arrives as an encrypted PDF attachment. Save the separate report key before approving the scope; TGG never emails the key with the report. You can retrieve it here after a recent authenticator check.
Keep this key in your password manager or another private place. Do not send it by email. The portal keeps the key for the assessment retention period; keep your own copy.
Verify your authenticator in another tab, then return here →
Your proposed scope and fee
Your crypto invoice
TGG issued this invoice after scope approval and DNS verification. Pay only the exact asset, network and amount shown here.
TGG confirms receipt on the stated network before payment is marked as received. If an invoice expires before payment, contact tobias@tgg.group. TGG does not request wallet recovery phrases or private keys.
Evidence you can work with.
Our fictional sample shows the PDF layout, observations, review prompts and coverage limits. It contains no findings about a real website.
Saw a TGG check in your server logs? Identify its requester privately →
A configuration baseline does not establish that an application is secure or replace a penetration test. No exploit tests or authenticated pages are included.