Pricing

from $80.00 / 1,000 full exposure reports

Try for free

Go to Apify Store

Domain Security Scanner: SSL, DMARC, Subdomains, Tech Stack

Try for free

Passive security report for a domain: SSL/TLS, headers, SPF/DKIM/DMARC, subdomains, tech stack and known CVEs, scored 0-100 with fixes. Use this when vetting a vendor or your own domain.

Pricing

from $80.00 / 1,000 full exposure reports

Rating

0.0

(0)

Developer

mohamed senator

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Automation

Business

Mode (which tool to run)

mode

Optional

Pick one. full_report ($0.08): everything in one scored report with a prioritized fixes array (use for due diligence, vendor risk, 'is this domain healthy?'). tech_stack ($0.015): technologies with version, confidence, evidence. subdomains ($0.02): certificate-transparency subdomains, live/dead, takeover candidates. email_security ($0.005): SPF/DKIM/DMARC/MTA-STS/BIMI with fixes (use for spoofing/phishing risk). tls ($0.005): certificate, protocol, HSTS/CSP and other headers, security.txt. diff ($0.02, first baseline free): only what changed since the last run of this mode for the domain (use on a weekly schedule). Nothing is charged when the result has no data (outcome no_match, unavailable or error).

Type:string

Default:full_report

Options:

full_reporttech_stacksubdomainsemail_securitytlsdiff

Domain (single)

domain

Optional

One domain or URL, e.g. example.com or https://www.example.com/path. Shortcut for agents; for several domains use 'domains'. Subdomains are accepted: TLS and tech use the host as given, DNS/RDAP/email/subdomain checks use its registrable domain.

Type:string

Domains (bulk)

domains

Optional

List of domains to check. One dataset item is produced per domain, each charged separately when it contains data. At most 100 entries (also capped by 'Max domains').

Type:array

Max. items:100

Max domains

maxDomains

Optional

Safety cap on how many domains from the list are processed (max 100).

Type:integer

Minimum:1

Maximum:100

Default:25

Max subdomains to resolve

maxSubdomains

Optional

Subdomains found in certificate transparency logs are all counted, but only this many are resolved live/dead and checked for takeover (max 500).

Type:integer

Minimum:1

Maximum:500

Default:100

Include CVE matching

includeVulns

Optional

In full_report and diff, map detected technology versions to CVEs (OSV.dev, NVD), CISA KEV and EPSS. Versions are 'detected', never 'confirmed'.

Type:boolean

Default:true

Extra DKIM selectors

dkimSelectors

Optional

Additional DKIM selectors to check besides ~26 common ones (e.g. a custom selector used by your mail provider). Max 20.

Type:array

Max. items:20

Snapshot store name (diff mode)

snapshotStoreName

Optional

Named key-value store that holds one snapshot per domain for diff mode. Keep the same name across scheduled runs.

Type:string

Default:domain-exposure-snapshots

Update baseline after diff

updateBaseline

Optional

In diff mode, replace the stored snapshot with the current state after reporting changes. Turn off to keep comparing against a fixed baseline.

Type:boolean

Default:true

Concurrent domains

maxConcurrency

Optional

How many domains are checked in parallel (max 10).

Type:integer

Minimum:1

Maximum:10

Default:5

Request timeout (seconds)

requestTimeoutSecs

Optional

Timeout for each network request; every request is retried with backoff (max 30).

Type:integer

Minimum:3

Maximum:30

Default:10

GuardHawk — Domain Security Audit: SSL, DNS, Takeover Risk

inexhaustible_glass/domain-health-audit

Full domain security audit in one call: SSL/TLS, DNS, SPF/DKIM/DMARC, security headers, WHOIS, blacklist, tech stack — PLUS subdomain-takeover risk and public S3-bucket exposure detection, which no other domain-audit tool checks. Returns a 0-100 health score + fix list. No API key, no login.

Hitman studio

5.0

(1)

Domain Intelligence Lookup

obicodes/domain-intel

Full domain intelligence in one call. Get WHOIS registration data, DNS records, SSL certificate status, IP geolocation, ASN, mail provider detection, and an actionable email security score (SPF, DMARC, MX). Built for developers, security teams, agencies, and growth teams.

Obicodes

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

🛡️ Subdomain Finder, Attack Surface & SSL OSINT Scanner

unrivaled_fortress/ssl-certificate-checker

SSL Labs-style certificate inspector: paste domains, get issuer, validity dates, days-to-expiry, SANs, TLS version, cipher and a security grade (A+→F) for every host. No API key, no proxy.

David A

Lighthouse Batch Audits & Regression Alerts

peerless_columbine/lighthouse-batch-audit-monitor

Audit public pages with Lighthouse13.5.0, export raw and HTML reports, and compare persistent category baselines.

tingyou333 zhuang

SiteVerdict — robots.txt & Sitemap Monitor

siteverdict/siteverdict-robots-sitemap-monitor

Catch SEO disasters before Google does: watches robots.txt, XML sitemaps and key pages for Disallow: /, noindex, canonical and status changes, sitemap URL drops and errors. Diffs vs last run, Slack/webhook alerts, HTML report.

Aman Thakran

NF Vulnerability Scanner — All-in-One Website Security Audit

nativefoundation-inc/vuln-scan-actor

The most comprehensive all-in-one website vulnerability scanner on Apify. Multi-engine security testing — active scanning, CVE detection, server misconfig checks, plus SPF/DMARC email-spoofing checks and leaked-secret scanning. Structured JSON report with severities and priority grades.

NativeFoundation, inc.

Domain Tech & Security Audit

dougnukem/domain-tech-security-audit

For a list of domains, returns DNS records, SPF/DMARC email authentication, TLS certificate expiry, security-header score, CDN/cloud provider and server stack hints. Built for lead qualification, vendor due diligence and AI agents.

Doug Daniels

Security Headers Scanner

pattonholdings/security-headers-scanner

Scan HTTP security headers for any URL. Returns A+ to F grade, per-header pass/weak/missing status (CSP, HSTS, X-Frame-Options), and Nginx/Apache/Express/Cloudflare fix snippets. Use for security audits, compliance checks, vendor review. Input: url or urls[]. Output: JSON grade report.