Tools

Every tool returns structured results with explained findings. Prices are fixed per check and shown before you pay.

• DNS

  CAA record check

  Show which certificate authorities may issue for a domain, from its CAA records.

  GET /v1/dns/caa$0.01
• DNS

  DNSSEC check

  Report whether a domain is DNSSEC-signed and validates, from the resolvers' AD flag.

  GET /v1/dns/dnssec$0.01
• DNS

  DNS lookup

  Resolve selected record types with TTL and the resolver that answered.

  GET /v1/dns/lookup$0.005
• Domains

  Domain health check

  One report on a domain's mail and DNS security: nine checks with coded findings.

  GET /v1/domain/health$0.08
• Domains

  RDAP domain lookup

  Look up a domain's registrar, expiry date, EPP statuses and nameservers over RDAP.

  GET /v1/domain/rdap$0.01
• HTTP

  Security headers check

  Check HTTP to HTTPS redirects, HSTS, CSP and the other security headers of a site.

  GET /v1/http/security-headers$0.01
• Mail

  BIMI record check

  Check a domain's BIMI record, its logo and certificate URLs, and DMARC enforcement.

  GET /v1/mail/bimi$0.01
• MailBulk up to 20

  Mail configuration check

  One report covering MX, SPF, DMARC and DKIM for known selectors.

  GET /v1/mail/check$0.03
• Mail

  DKIM record check

  Check the DKIM public key record for a given selector.

  GET /v1/mail/dkim$0.01
• Mail

  DKIM selector finder

  Try 27 common DKIM selectors for a domain and check every key that is found.

  GET /v1/mail/dkim-discover$0.02
• Mail

  DMARC check

  Look up and explain a domain's DMARC policy and tags.

  GET /v1/mail/dmarc$0.01
• Mail

  MTA-STS and TLS-RPT check

  Check the MTA-STS record and policy file, MX coverage, and the TLS-RPT record.

  GET /v1/mail/mta-sts$0.02
• Mail

  MX lookup

  List a domain's mail servers with priorities, including null MX.

  GET /v1/mail/mx$0.01
• Mail

  Mail provider detection

  Name the mailbox provider, gateways and sending services a domain uses, from MX and SPF.

  GET /v1/mail/provider$0.005
• Mail

  Reverse DNS check for mail servers

  Check PTR records and forward confirmation (FCrDNS) for a domain's MX addresses.

  GET /v1/mail/ptr$0.01
• Mail

  SPF check

  Parse and evaluate a domain's SPF policy, including the DNS lookup budget.

  GET /v1/mail/spf$0.01
• Sites

  Site health check

  One report on a site's TLS certificate, HTTPS redirects, security headers and domain expiry.

  GET /v1/site/health$0.025
• TLS

  TLS certificate check

  Check the certificate a domain serves on port 443: expiry, name, chain and key.

  GET /v1/tls/certificate$0.01