Most independent agencies have never checked. Enter your domain and you will know in about three seconds, along with the two or three things worth fixing, in plain English.
Free at the conference. Sign in, enter the code from the slide, and scan as many domains as you like.
The scan reads public DNS records and your public website. It uses no credentials, touches nothing inside your network, and reads no client data. It is an automated check, not a full security assessment.