Transitioning from NCSC Mail Check & Web Check
A comprehensive guide for UK Public Sector organisations migrating to Cloudflare's integrated cloud-native security platform as NCSC retires its Active Cyber Defence services.
Why This Matters
The NCSC is retiring Mail Check and Web Check as part of its ACD 2.0 strategy. Cloudflare can help fill the gap with integrated security capabilities.
Deadline Approaching
Mail Check and Web Check will be fully retired by March 31, 2026. Feature reductions began in early 2025.
Enhanced Protection
Move from periodic scanning to continuous, real-time protection with active enforcement at the network edge.
Foundation DNS
Start with free, enterprise-grade DNS—the fastest in the world—then unlock the entire Cloudflare security ecosystem.
The Three Pillars of Transition
Frame your transition strategy around these core value propositions.
Continuous Protection vs. Periodic Scanning
While Web Check and Mail Check were point-in-time tools, Cloudflare offers always-on monitoring and enforcement. This minimizes the window of opportunity for attackers to exploit new misconfigurations.
Integrated Remediation
The NCSC told you what to fix; Cloudflare provides the button to fix it. One-click security controls are particularly valuable for local authorities with small IT teams.
Proactive Action, Not Just Advice
Cloudflare is a key piece of the security puzzle—not just advising on issues but enabling you to take immediate, proactive action to remediate risks directly from your dashboard.
What's Covered in This Guide
Mail Check Replacement
DMARC monitoring, SPF/DKIM analysis, email source identification, and TLS/MTA-STS confidentiality controls.
Web Check Replacement
Certificate monitoring, security headers, vulnerability detection, dangling DNS records, and security.txt management.
Honest Gap Analysis
Transparent assessment of where Cloudflare provides full coverage, partial coverage, and areas requiring complementary solutions.
Migration Roadmap
Phased implementation plan, TCO considerations, and strategic messaging for stakeholder alignment.
Get Started in Minutes
Add your domain to Cloudflare's free DNS to unlock the entire security platform. No commitment required—DNS is free forever.