Free tool · T3

The ownership risk report

Nine assets, and who actually controls each one. If the answer is "I don't know" for most of them, that is itself the finding.

Domain registrar

Existential risk

The account where your web address — yourbusiness.com — is registered and renewed.

Not yet answered

Domains can’t be transferred to a new registrar within 60 days of the last registration or transfer — an ICANN rule, not your registrar’s choice. It doesn’t stop you from fixing access with your current registrar in the meantime.

DNS

Existential risk

The records that point your domain to your website, your email, and anything else that runs on it.

Not yet answered

Hosting

High risk

The server your website's files and database actually live on.

Not yet answered

CMS admin (website platform login)

High risk

The admin login to your website platform — WordPress, Shopify, Webflow, or similar.

Not yet answered

Google Search Console

Medium risk

Google's direct channel for how your site is indexed and performing in search.

Not yet answered

Google Analytics

Low risk

Your website's traffic and visitor behaviour data.

Not yet answered

Google Business Profile

Medium risk

The listing that shows up in Google Maps and local search results.

Not yet answered

Business email

Medium risk

The account and/or domain records your business email actually runs on.

Not yet answered

Third-party licences

Medium risk

Paid plugins, themes, or other software tied to your developer's personal account rather than the business's.

Not yet answered

Your answers save automatically in your browser as you go. Nothing is sent anywhere — this entire tool, including the email draft below, runs on your device.

Your exposure so far

Answer the nine questions on the left to see your risk profile appear here.

Domain transfers are time-locked. ICANN requires a 60-day wait after a domain is registered or transferred before it can move to a new registrar. Plan around it — it doesn’t stop you from fixing access with your current registrar today.

Not all losses are equal.A lost Google Business Profile is generally recoverable through Google’s own verification process. A domain that lapses, or that a former developer won’t release, generally is not — there is no equivalent recovery path.

This tool scores exposure, not blame. Most gaps like these happen by accident — a developer set something up under their own account to move fast, and nobody circled back. The fix is usually one email, not a fight.

Read Hiring a Web Developer Without Getting Burnedfor the full picture →Book a consultation

No obligation. Reply within one business day.