Pricing

from $10.00 / 1,000 host audits

Try for free

Go to Apify Store

Subdomain Takeover & Certificate Expiry Radar

Try for free

Find subdomain takeover risks and expiring TLS certificates before attackers or outages do. Discovery from Certificate Transparency logs, CNAME chain analysis, live TLS probes and dangling DNS detection, with one clean JSON record per host for security, DevOps and MSP teams.

Pricing

from $10.00 / 1,000 host audits

Rating

0.0

(0)

Developer

Abhishek Kumar

Actor stats

Bookmarked

Total users

Monthly active users

8 days ago

Last modified

Subdomain Takeover and SSL Expiry Scanner API through CLI

The Apify CLI is the official tool that allows you to use Subdomain Takeover & Certificate Expiry Radar locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Subdomain Takeover & Certificate Expiry Radar API in Python

Subdomain Takeover & Certificate Expiry Radar API in JavaScript

Subdomain Takeover & Certificate Expiry Radar OpenAPI definition

Subdomain Takeover & Certificate Expiry Radar API

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

anshumanatrey/theharvester-osint

Cloud-hosted theHarvester OSINT tool. Harvest emails, subdomains, IPs, URLs and ASNs from 54+ public sources (Shodan, Censys, crt.sh, VirusTotal, SecurityTrails, GitHub, hunter.io). Full CLI feature parity: DNS brute force, subdomain takeover, screenshots. $0.003 per record harvested.

Anshuman Atrey

GuardHawk — Domain Security Audit: SSL, DNS, Takeover Risk

inexhaustible_glass/domain-health-audit

Full domain security audit in one call: SSL/TLS, DNS, SPF/DKIM/DMARC, security headers, WHOIS, blacklist, tech stack — PLUS subdomain-takeover risk and public S3-bucket exposure detection, which no other domain-audit tool checks. Returns a 0-100 health score + fix list. No API key, no login.

Hitman studio

5.0

(1)

SSL Certificate Inspector - TLS Audit & Expiry Monitor

santamaria-automations/ssl-certificate-inspector

Inspect SSL/TLS certificates for any domain: chain validation, expiry dates, cipher suites, TLS versions, subject alt names, issuer details, and security scoring. Export data, run via API, schedule and monitor runs, or integrate with other tools.

NanoScrape

Subdomain Finder - Discover Every Subdomain Of A Domain

thirdwatch/subdomain-finder

Discover every subdomain for any apex domain. Merges 4 sources: certificate transparency (crt.sh), HackerTarget, RapidDNS, plus DNS bruteforcing of common names. Verifies each is live via DNS + HTTP probe.

Thirdwatch

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

Domain Expiry Checker

datapilot/domain-expiry-checker

It extracts registrar, expiry date, status, name servers, and days left. Flags expiring domains (critical/warning) and outputs structured JSON—ideal for domain monitoring, SEO audits, and portfolio management. 🌐📅

Data Pilot

Certificate Transparency & DNS Subdomain Inventory

thescrapelab/subdomain-intelligence-osint

Discover subdomains from public certificate tables, validate DNS and optionally profile public pages. Includes source coverage and reports without external provider APIs.

Inus Grobler

SSL Certificate Expiry Monitor

andok/ssl-certificate-monitor

Monitor SSL/TLS certificate validity and expiration dates across thousands of domains to prevent costly outages.

Andok

SSL Certificate Checker

bgfc97/ssl-certificate-checker

Check TLS/SSL certificates for many hosts: issuer, valid-from/to, days until expiry, expired/expiring-soon flags, SAN domains and trust status. For uptime & certificate-expiry monitoring. No key, no proxy.

Bruno

Subdomain Finder: Certificate Transparency

glitchbound/subdomain-scraper

Subdomain discovery and subdomain lookup from Certificate Transparency logs: a certificate search over every SSL certificate ever logged, with no brute-force wordlist and no DNS hammering. One row per hostname with first seen, issuing CA and validity, for recon and asset discovery.