Start with the live form
Enter a domain, URL, IP, email, or record and get a focused result without setup.
All tools
Web Data
Domain Intelligence
DNS & Infrastructure
Security & Trust
Identity & Verification
Monitoring & Automation
Security Rating
Enter a domain to grade its external security from A to F, with a score for each area and the findings behind it.
Results
Interactive intelligence tool
Run the check, then ship the workflow
Use the browser tool for a fast answer, then move the same logic into scripts, monitoring, or product flows when it becomes repeatable.
Review decision-ready signals
Outputs highlight statuses, risks, records, and next actions instead of raw provider noise.
Automate the workflow that works
Use the request and response examples to turn a one-off check into an API call or recipe.
Used by people at these companies
What this tool helps you decide
Each page is shaped around a practical operational question, not just a raw lookup.
See the current DNS, registration, security, pricing, or reputation evidence.
Compare the result with related checks so the next move is easier to trust.
Copy examples, open linked tools, or move into API documentation when you need scale.
Trust signals before you integrate
Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.
Live
Service status
Check live service health and documented failure responses before you integrate.
OpenAPI
API artifacts
OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.
API keys
Protected access
Authenticated endpoints use API keys with clear credit costs before you call them.
10,000
Free allowance
Start with 10,000 monthly credits and upgrade only when usage grows.
Key Features
Six areas, one grade
Certificate and TLS, security headers, email authentication, DNS, blocklist reputation and security contact, weighted into one score.
Findings you can act on
Every point lost comes with a finding and its severity, such as a missing security header or a weak email policy.
Nothing guessed
An area that cannot be checked is left out of the score instead of counting against the site, and the confidence shows how much was measured.
Example request
GET /v1/security-rating?domain=example.comBuilt on the same API
The browser experience previews DomScan's structured endpoints, so teams can validate a use case before writing code.
Frequently asked questions
How is the grade calculated?
Each area gets a score from 0 to 100, weighted into an overall score: A from 90, B from 80, C from 70, D from 60, otherwise F. A critical problem such as an expired certificate always gives an F.
Is this a penetration test?
No. Only public, passive checks are used, the same things any visitor or mail server can see. Nothing is attacked or probed for vulnerabilities.
What does the confidence mean?
High means almost every area was measured. Medium or low means some checks could not be completed, so the grade rests on less evidence.