Is ext.protectohq.com safe to use? That depends on what you're looking for, but right now the evidence points to caution. This subdomain appears to be part of a security or protection service, yet it lacks some basics you'd expect from a legitimate SaaS company. The domain has no public ownership records, no history in the Wayback Machine, and no independent reviews — so there's no easy way to verify who runs it or how long they've been around. Even the technical setup has gaps. Accepting older, insecure encryption is a real concern for any site in the security space. On the positive side, the site does have a proper legal disclosure and privacy policy, which suggests some effort at compliance. But without a verified identity, social presence, or visible contact information, it's hard to say for sure whether ext.protectohq.com is an early-stage startup or something riskier. If you're considering using their service, look for a direct way to contact them and check if the main protectohq.com domain gives more complete information. For now, proceed with care.
In plain English
I'd approach this site with caution. While it has legal pages and a valid certificate, key information about who owns and runs the business is missing, and it doesn't meet the security standards you'd expect from a company offering protection tools. Without a track record or clear contact info, it's hard to fully trust what you're signing up for.
Where the score comes from
The site uses a valid certificate and modern encryption, but still accepts older, insecure versions of TLS. That's a notable gap for any business, especially one that might handle sensitive data. It also doesn't set browser-level protections against clickjacking or other common attacks.
The domain's WHOIS records aren't showing up, which is unusual for a registered business. Combined with no archive history and no external reviews, it's hard to confirm who actually runs this site and how long it's been around.
The site isn't blacklisted and hasn't been flagged by Google, but it also has no presence on review platforms or in the Wayback Machine. That's a blank slate — neither good nor bad, but it gives you less to rely on when deciding trust.
There's an about page and a legal entity disclosure, which is a positive step. But there's no contact info on the homepage, no social media links, and not even a favicon — small signals that add up to a less open impression.
The site publishes both a privacy policy and terms of service, plus the required EU business disclosure. For a SaaS company, that meets the basic legal expectations, even if other areas are thin.
The site loads quickly behind Cloudflare's network and uses a valid certificate. It doesn't use email or DNSSEC, which is common for smaller operations, and overall the technical setup is functional but not especially robust.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →