Company Domain Tech, DNS & Security Audit

What you get: one row per domain with the company name, detected tech stack, DNS (A/MX/NS/SPF), TLS certificate issuer and days to expiry, RDAP registration data and a completeness score.

Sample output from a real run (2026-10-18, {"domains": ["stripe.com"], "auditLevel": "techstack_report", "dryRun": false}, 1 row):

domain	companyName	techStack	TLS issuer / days to expiry	MX	completeness	billing event
stripe.com	Stripe	Next.js, Nginx	DigiCert, Inc. / 53	aspmx.l.google.com (+4)	1	company-full

That run was 1 × company-full ($0.08) + Actor start 4 × $0.005 = $0.10. Domains with no usable signals are skipped and not charged.

Open Input (paste the JSON below → Start)

Paid first run ≈ USD 0.10 for 1 domain (company-full $0.08 + Actor start 4 × $0.005 at the default 4 GB memory). The Console form starts with dryRun: true (no rows, no charge), so paste this JSON, which sets dryRun: false, and Start.

{
  "domains": [
    "stripe.com"
  ],
  "auditLevel": "techstack_report",
  "proxy": {
    "useApifyProxy": false
  },
  "dryRun": false
}

Store Quickstart

Run the bounded paid first-run JSON above first; keep report/export options off unless needed.

{
  "domains": [
    "stripe.com"
  ],
  "auditLevel": "techstack_report",
  "proxy": {
    "useApifyProxy": false
  },
  "dryRun": false
}

Run one audited domain:

{
  "domains": ["stripe.com"],
  "auditLevel": "techstack_report",
  "dryRun": false
}

Run a lighter DNS/TLS check:

{
  "domains": ["notion.so", "shopify.com"],
  "auditLevel": "security_audit",
  "dryRun": false
}

Preview the output shape without live requests or billing:

{
  "dryRun": true
}

Use with Apify MCP

Exact actor: taroyamada/company-enrichment-intelligence

Sample input JSON:

{
  "domains": [
    "stripe.com"
  ],
  "auditLevel": "techstack_report",
  "proxy": {
    "useApifyProxy": false
  }
}

Audit company domains for public website metadata, tech stack, DNS, TLS, RDAP, robots.txt, and sitemap signals. Enter company domains or URLs and get a source-linked domain audit row for vendor research, market mapping, and portfolio hygiene. No login, no paid API key, no private pages, and no person-targeting output.

Run the next report

Turn this domain audit into a buyer-facing report workflow:

• Run a page-level content QA report when the domain needs source-linked page evidence.
• Run a broken-link and URL health report when site reliability issues are the next question.
• Run an indexability and AI crawler report when robots, sitemap, canonical, or crawler-access signals need a site-level handoff.

What You Get

• Website reachability, final URL, page title, and meta description.
• Tech stack hints from public HTML and response headers.
• DNS posture: A, MX, NS, SPF, DMARC, and derived mail provider.
• RDAP registration age, registrar, expiry, and status flags.
• TLS certificate issuer, validity window, days to expiry, and SAN domains.
• robots.txt / sitemap presence and approximate sitemap URL count.
• A completeness score and signalsResolved count for filtering weak records.

Input Fields

Field	Description
domains	Company domains or URLs. URLs are reduced to hostnames; www. and duplicates are removed.
auditLevel	basic, security_audit, or techstack_report. This selects the value event used for billing.
proxy	Optional. Public sources usually work without a proxy; use only for large compliant runs.
dryRun	When true, emits one illustrative sample row without live calls or billing.

Sample Output

{
  "rowType": "company",
  "billingEventName": "company-full",
  "domain": "notion.so",
  "companyName": "Notion",
  "description": "A connected workspace for docs, wikis, and projects.",
  "website": {
    "reachable": true,
    "finalUrl": "https://notion.so/",
    "title": "Notion - One workspace. Every team."
  },
  "dns": {
    "mx": ["aspmx.l.google.com"],
    "mailProvider": "Google Workspace",
    "spf": "v=spf1 include:_spf.google.com ~all",
    "dmarc": "v=DMARC1; p=reject;"
  },
  "rdap": {
    "registrar": "MarkMonitor Inc.",
    "createdDate": "2013-03-13T00:00:00Z",
    "ageYears": 13.2
  },
  "ssl": {
    "issuer": "Google Trust Services",
    "daysToExpiry": 60,
    "sans": ["notion.so", "*.notion.so"]
  },
  "techStack": ["Next.js", "React", "Segment", "Google Analytics / GTM"],
  "schemaOrg": {
    "name": "Notion",
    "sameAs": ["https://www.linkedin.com/company/notionhq"]
  },
  "site": {
    "hasRobots": true,
    "hasSitemap": true,
    "sitemapUrlCount": 1200
  },
  "completeness": 1,
  "signalsResolved": 7
}

Output Fields

Field	Description
billingEventName	PPE event: company-basic or company-full.
website	Public page reachability and final URL.
dns	DNS and mail posture from public DNS records.
rdap	Public registration metadata from RDAP.
ssl	TLS certificate metadata from a direct public TLS handshake.
techStack	Detected public technology hints.
schemaOrg	Organization metadata published in page structured data.
site	robots.txt and sitemap signals.
completeness	0-1 score based on signal groups resolved.

Pricing

Event	Price	When
company-basic	$0.02	DNS, TLS, RDAP, firmographics, and site signals.
company-full	$0.08	Full report including tech stack and schema.org signals.

Domains that resolve no usable signals are skipped and not charged.

Domains whose website cannot be reached are not charged. If the company's own website gives no HTTP answer (connection refused, DNS-only domain, address blocked by the safety rules, or a login/CAPTCHA/block page), the row would only carry DNS/RDAP fragments, so it is not written to the dataset and not billed. It is saved in the run's key-value store record FAILED_ROWS, and the run status message tells you how many there were.

Compliance Guardrails

• Uses public, non-authenticated sources only: company website, DNS, RDAP, TLS, robots.txt, and sitemap.
• Blocks localhost, private network ranges, metadata hosts, non-HTTP(S) URLs, and redirects into private addresses.
• Stops on login walls, CAPTCHA, access-block pages, oversized responses, and repeated redirects.
• Does not access private dashboards, paid databases, account-only pages, or bypass controls.
• Output is not a legal, security, procurement, or vendor-certification opinion.