Pricing

Pay per usage

Operational Asset Monitor

Monitor public HTTPS endpoints, domains, DNS/email posture, SPF, DMARC, MTA-STS, TLS-RPT, CAA, security.txt, and security headers for operational alerts.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

X L

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Automation

Business

Endpoints

endpoints

Required

Public HTTPS/HTTP endpoints to check.

Type:object[]

Maximum endpoints

maxEndpoints

Optional

Cost guard for how many endpoints to check in one run.

Type:integer

Minimum:1

Maximum:50

Default:10

Domains

domains

Optional

Public domain names to check through RDAP for registration expiry.

Type:object[]

Default:

[]

Maximum domains

maxDomains

Optional

Cost guard for how many domains to check in one run.

Type:integer

Minimum:1

Maximum:50

Default:10

DNS / email domains

dnsDomains

Optional

Public domain names to check for MX, SPF, DMARC, and CAA records. Use this for email/DNS/certificate-authority posture drift monitoring.

Type:object[]

Default:

[]

Maximum DNS domains

maxDnsDomains

Optional

Cost guard for how many DNS/email domains to check in one run.

Type:integer

Minimum:1

Maximum:50

Default:10

security.txt domains

securityTextDomains

Optional

Public domains to check for vulnerability disclosure metadata in /.well-known/security.txt and /security.txt plus compact security well-known posture endpoints such as CSAF provider metadata, change-password, OpenID configuration, assetlinks, and Apple app-site association.

Type:object[]

Default:

[]

Maximum security.txt domains

maxSecurityTextDomains

Optional

Cost guard for how many vulnerability disclosure domains to check in one run.

Type:integer

Minimum:1

Maximum:50

Default:10

Certificate Transparency JSON URLs

certificateTransparencyUrls

Optional

Public JSON URLs containing recent certificate transparency rows to parse. Defaults to empty to avoid extra network calls unless explicitly enabled.

Type:object[]

Default:

[]

Maximum CT URLs

maxCertificateTransparencyUrls

Optional

Cost guard for how many Certificate Transparency JSON URLs to fetch in one run.

Type:integer

Minimum:1

Maximum:50

Default:10

SSL warning threshold days

sslWarnDays

Optional

Mark a certificate as WARN when it expires within this many days.

Type:integer

Minimum:1

Maximum:365

Default:30

SSL critical threshold days

sslCriticalDays

Optional

Mark a certificate as CRITICAL when it expires within this many days.

Type:integer

Minimum:1

Maximum:90

Default:7

Domain warning threshold days

domainWarnDays

Optional

Mark a domain as WARN when registration expires within this many days.

Type:integer

Minimum:1

Maximum:730

Default:45

Domain critical threshold days

domainCriticalDays

Optional

Mark a domain as CRITICAL when registration expires within this many days.

Type:integer

Minimum:1

Maximum:365

Default:14

HTTP timeout in milliseconds

httpTimeoutMs

Optional

Timeout used for TLS and HTTP checks.

Type:integer

Minimum:1000

Maximum:30000

Default:8000

Previous asset IDs

previousAssetIds

Optional

Optional IDs from a previous run to suppress unchanged alerts.

Type:string[]

Default:

[]

Domain Security Posture Checker — DNS, SPF, DMARC, TLS

nexgendata/domain-security-posture-checker

One-call security report card per domain — WHOIS, DNS, SPF/DMARC email auth, SSL/TLS expiry, with a posture score and grade. No login.

NexGenData

Public Email Auth DNS Readiness Agent

jacksu/public-email-auth-dns-readiness-agent

Check public email authentication DNS readiness for domains: MX, SPF, DMARC, DKIM selectors, BIMI, MTA-STS, TLS-RPT, risk labels, stable hashes, and useful-result pricing.

jack su

Email Deliverability & Domain Posture Auditor

gp005/email-deliverability-auditor

Audit email deliverability and domain posture in bulk: MX, SPF, DKIM (common selectors), DMARC policy, DNSSEC, MTA-STS, TLS-RPT, and BIMI. Returns a 0-100 posture score, a prioritized fix list, and per-record detail. Pure DNS-over-HTTPS — no scraping, no API keys.

Geo

Email Security Scanner

cerridwen/email-security-scanner

DNS-only email posture for any domain: MX, SPF, DMARC, DKIM probes, MTA-STS, BIMI. No email sent. Returns score + actionable tips. Batch-friendly for CRM domains and compliance snapshots.

Cerridwen

Bulk Email Deliverability Checker - SPF, DKIM, DMARC, MX

codeblix/email-deliverability-checker

Audit thousands of domains for email authentication, DNS issues, and deliverability risk. Checks SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, TLS-RPT, BIMI. No login, no proxy, no API keys needed.

Jayesh Choolun

DNS Lookup | Scrape Domain Records & Security Intelligence

datascoutapi/dns-lookup

DNS lookup scrapes 22 data points including 10 DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, PTR, CAA) + email security analysis ( SPF/DKIM/DMARC), SSL certificate checker, domain monitoring. Processes 100 domains per batch with security scoring.

halam

Website & Domain Health Audit — SSL, DNS, Email, Security Score

inexhaustible_glass/domain-health-audit

Complete website & domain audit in one run: SSL/TLS, DNS, SPF/DKIM/DMARC email security, security headers, tech stack, WHOIS, blacklist & uptime — with a health score and fix list. No API key.

Hitman studio

Domain Security & Email Deliverability — DNS, SPF, DMARC, DKIM

ryanclinton/dns-record-lookup

Audit a domain portfolio for email spoofing, broken SPF, DMARC enforcement, DNSSEC and shadow-SaaS senders. Returns a posture score, what to fix first, vendor dependencies and drift alerts — not just records. Bulk DNS / SPF / DMARC / DKIM lookup, no API keys.

Ryan Clinton

Bulk Domain Email Security Checker

automation-lab/bulk-domain-email-security-checker

Audit SPF, DMARC, MX, and DKIM DNS posture for bulk domain lists with scores, risk flags, and raw records.

Stas Persiianenko

Bulk DNS Records Lookup - A, MX, TXT, NS, CNAME

logiover/bulk-dns-records-lookup

Look up DNS records for thousands of domains at once — A, AAAA, MX, NS, TXT, CNAME, SOA and CAA — via DNS-over-HTTPS. Ideal for email deliverability (SPF/DMARC), security audits and migrations. No API key, export to CSV or JSON.