Website & Domain Health Audit — SSL, DNS, Email, Security Score

One domain in → a complete health report out. Most tools check one thing (just SSL, or just DNS). This runs 9+ checks at once and gives a health score (0–100) + a fix list.

What it checks

1. 🔒 SSL/TLS — issuer, expiry, days left, key strength, SAN, trust
2. 🌐 DNS — A, AAAA, MX, NS, TXT, CAA, SOA, DNSSEC
3. 📧 Email security — SPF, DMARC (+ policy), DKIM (auto-probes 20 selectors)
4. 🛡️ Security headers — HSTS, CSP, X-Frame-Options, etc. + grade
5. ⚙️ Tech / CDN / server — Cloudflare, Vercel, WordPress, Next.js…
6. 🏷️ WHOIS (RDAP) — registrar, domain age, expiry, status, nameservers
7. ⚡ HTTP — status, HTTPS redirect, response time, redirect chain
8. 🚫 Blacklist — DNSBL (Spamhaus, SpamCop, Barracuda, SORBS)
9. 🎯 Health score + issues — what's wrong and what to fix

Free, no API key, no blocking. Works for any domain.

Input (simple)

{ "domain": "example.com" }

Bulk: { "domains": ["example.com", "stripe.com"] }

Output (rich)

{
  "domain": "example.com",
  "healthScore": 82,
  "grade": "B",
  "issues": ["No DMARC record (email spoofable)", "Missing security headers: CSP, HSTS"],
  "passed": ["HTTPS enforced", "SSL valid", "SPF set"],
  "ssl": { "issuer": "...", "daysToExpiry": 71, "valid": true },
  "dns": { "MX": [...], "dnssec": true },
  "email": { "spf": true, "dmarc": false, "dkim": true, "dkimSelectors": ["google"] },
  "securityHeaders": { "present": [...], "missing": [...], "grade": "C" },
  "tech": ["Cloudflare", "Next.js"],
  "whois": { "registrar": "...", "domainAgeDays": 9876, "daysToExpiry": 210 }
}

Who needs this (millions)

DevOps & SREs · web agencies & freelancers · marketers (email deliverability) · SEO · security teams · anyone who owns or manages a website. Replaces 8 separate tools with one report.

Use cases

Pre-launch checks · client onboarding audits · monitoring SSL/domain expiry · email deliverability fixes · security posture reports · due diligence.

Legal

Performs only standard, public, read-only network checks (the same a browser or dig/openssl would). No exploitation, no intrusion.

---

Also known as / search terms

domain health checker, domain health check, website audit, website audit tool, free website audit, SSL checker, SSL certificate checker, SSL expiry monitor, certificate expiry check, TLS check, DNS checker, DNS lookup, DNS record checker, DNS health, DNSSEC check, CAA record check, MX lookup, SPF checker, SPF record check, DKIM checker, DKIM lookup, DMARC checker, DMARC analyzer, email security audit, email authentication check, email spoofing check, email deliverability checker, security headers checker, HSTS check, CSP check, website security scanner, web security check, tech stack detector, what CMS is this site, CDN detector, WHOIS lookup, RDAP lookup, domain age checker, domain expiry check, registrar lookup, blacklist checker, DNSBL check, spamhaus check, IP blacklist, uptime monitor, website uptime, response time check, website monitoring, domain monitoring, domain audit, devops tools, sre tools, network audit, site health score, website grader, domain reputation.