Pricing

Rating

Developer

Actor stats

Categories

Share

🔒 Domain Security Posture Checker · DNS · SPF · DMARC · TLS

One call returns a security report card per domain — WHOIS age, DNS, SPF/DMARC email auth, SSL/TLS expiry — with a posture score and grade. For security, due-diligence, and sales-engineering teams.

⚡ What you get

🎯 Use cases

1. Security teams scoring third-party domains
2. M&A / due-diligence quick risk checks
3. Sales engineering pre-call audits
4. Email deliverability (SPF/DMARC) audits

🚀 Sample inputs

{"domains":["stripe.com","github.com"]}

{"domains":["yourcompany.com"]}

📦 Sample output

{"domain":"stripe.com","score":90,"grade":"A","hasSPF":true,"hasDMARC":true,"dmarcPolicy":"reject","sslIssuer":"DigiCert Inc","sslDaysLeft":312,"findings":[]}

📊 Sample Output

👁 Sample output

🛠 How it works

1. DNS — A/MX/NS/TXT via DNS-over-HTTPS (Cloudflare).
2. Email auth — parses SPF and _dmarc DMARC policy.
3. TLS — reads the port-443 certificate (issuer, expiry).
4. WHOIS — registrar + dates via RDAP.
5. Score — weighted posture score + grade + findings.

🔗 Related Actors

• WHOIS Domain Lookup
• DNS Records Lookup
• SSL Certificate Checker
• Email DMARC Auditor

💰 Pricing Example

Pay-per-event: $0.005 per run + $0.15 per domain report (domain-report).

⚖️ Legal & data sources

Public DNS (DoH), public RDAP/WHOIS, and a standard TLS handshake on port 443 — all public, no login. Identified User-Agent.

❓ FAQ

A vulnerability scanner? No — a posture/hygiene report, not an intrusive scan. DKIM? SPF + DMARC checked; DKIM (selector-specific) on the roadmap. Fresh? Live at run time. Key? No. Bulk? Yes. Scoring? Weighted across SPF, DMARC policy, TLS, and DNS.

🆘 Troubleshooting

• SSL invalid/unreachable — host may not serve TLS on 443.
• No WHOIS — some TLDs have limited RDAP.
• Low score — check findings.
• Subdomain — pass the registrable domain.

🏷️ About NexGenData

Structured public-data tools for analysts, developers, and operators. thenextgennexus.com.