Company Domain Tech, DNS & Security Audit

Audit company domains for public website metadata, tech stack, DNS, TLS, RDAP, robots.txt, and sitemap signals. Enter company domains or URLs and get a source-linked domain audit row for vendor research, market mapping, and portfolio hygiene. No login, no paid API key, no private pages, and no person-targeting output.

Store Quickstart

Run one audited domain:

{
  "domains": ["stripe.com"],
  "auditLevel": "techstack_report",
  "dryRun": false
}

Run a lighter DNS/TLS check:

{
  "domains": ["notion.so", "shopify.com"],
  "auditLevel": "security_audit",
  "dryRun": false
}

Preview the output shape without live requests or billing:

{
  "dryRun": true
}

Run the next report

Turn this domain audit into a buyer-facing report workflow:

• Run a page-level content QA report when the domain needs source-linked page evidence.
• Run a broken-link and URL health report when site reliability issues are the next question.
• Create a SaaS change battlecard export when the audited domain is part of a competitive watchlist.
• Monitor public Shopify catalog and promo changes when the audited domain is an authorized storefront watch target.

What You Get

• Website reachability, final URL, page title, and meta description.
• Tech stack hints from public HTML and response headers.
• DNS posture: A, MX, NS, SPF, DMARC, and derived mail provider.
• RDAP registration age, registrar, expiry, and status flags.
• TLS certificate issuer, validity window, days to expiry, and SAN domains.
• robots.txt / sitemap presence and approximate sitemap URL count.
• A completeness score and signalsResolved count for filtering weak records.

Input Fields

Field	Description
domains	Company domains or URLs. URLs are reduced to hostnames; www. and duplicates are removed.
auditLevel	basic, security_audit, or techstack_report. This selects the value event used for billing.
proxy	Optional. Public sources usually work without a proxy; use only for large compliant runs.
dryRun	When true, emits one illustrative sample row without live calls or billing.

Sample Output

{
  "rowType": "company",
  "billingEventName": "company-full",
  "domain": "notion.so",
  "companyName": "Notion",
  "description": "A connected workspace for docs, wikis, and projects.",
  "website": {
    "reachable": true,
    "finalUrl": "https://notion.so/",
    "title": "Notion - One workspace. Every team."
  },
  "dns": {
    "mx": ["aspmx.l.google.com"],
    "mailProvider": "Google Workspace",
    "spf": "v=spf1 include:_spf.google.com ~all",
    "dmarc": "v=DMARC1; p=reject;"
  },
  "rdap": {
    "registrar": "MarkMonitor Inc.",
    "createdDate": "2013-03-13T00:00:00Z",
    "ageYears": 13.2
  },
  "ssl": {
    "issuer": "Google Trust Services",
    "daysToExpiry": 60,
    "sans": ["notion.so", "*.notion.so"]
  },
  "techStack": ["Next.js", "React", "Segment", "Google Analytics / GTM"],
  "schemaOrg": {
    "name": "Notion",
    "sameAs": ["https://www.linkedin.com/company/notionhq"]
  },
  "site": {
    "hasRobots": true,
    "hasSitemap": true,
    "sitemapUrlCount": 1200
  },
  "completeness": 1,
  "signalsResolved": 7
}

Output Fields

Field	Description
billingEventName	PPE event: company-basic or company-full.
website	Public page reachability and final URL.
dns	DNS and mail posture from public DNS records.
rdap	Public registration metadata from RDAP.
ssl	TLS certificate metadata from a direct public TLS handshake.
techStack	Detected public technology hints.
schemaOrg	Organization metadata published in page structured data.
site	robots.txt and sitemap signals.
completeness	0-1 score based on signal groups resolved.

Pricing

Event	Price	When
company-basic	$0.02	DNS, TLS, RDAP, firmographics, and site signals.
company-full	$0.08	Full report including tech stack and schema.org signals.

Domains that resolve no usable signals are skipped and not charged.

Compliance Guardrails

• Uses public, non-authenticated sources only: company website, DNS, RDAP, TLS, robots.txt, and sitemap.
• Blocks localhost, private network ranges, metadata hosts, non-HTTP(S) URLs, and redirects into private addresses.
• Stops on login walls, CAPTCHA, access-block pages, oversized responses, and repeated redirects.
• Does not access private dashboards, paid databases, account-only pages, or bypass controls.
• Output is not a legal, security, procurement, or vendor-certification opinion.

See Also

• Site QA Content Report Scraper for page-level content reports.
• Site QA Broken Link Report Scraper for link issue reports.
• SaaS Pricing Changelog Battlecard Watch Scraper for competitive page change reports.