| Domain | Grade | Score | Date | Scans | Actions |
|---|
DomIntel
Scan Any Domain
Get comprehensive security analysis with 65+ checks including SPF, DKIM, DMARC, SSL, and more.
Analyzing domain security...
Scan History
Your recent domain scans
0
Scans Today
0
Total Scans
Free
Plan
-
API Key
Average Score by Industry
Latest scan per domain
Loading…
Average Score by Country
Latest scan per domain
Loading…
Grade Distribution
No scans yet
Top Scans
No scans yet
All Scans
Filter and sort your scan history
| Domain | Grade | Score | Date | Scan History | Actions |
|---|
🔒 Your scans are private by default. Make individual scans public — from your History or a scan's report — to feature them here.
Recent Scans
Last 25 scans
Best Scans
Top 25 highest grades
Needs Attention
25 lowest grades (worst first)
AI Analysis Settings
Configure AI provider for enhanced analysis
When enabled, scans will include AI-powered analysis
⚠️ This key is stored against your account only and used solely for your own AI analysis requests. You are responsible for it: its cost, its usage, and its security. If you rotate or revoke a key with your provider, remember to update or clear it here too — an old key left in this field will simply stop working, it will not be rotated for you.
Max response length (higher = longer reports)
0.0 = focused, 2.0 = creative
Adds instructions to skip chain-of-thought & thinking tags (recommended for DeepSeek, reasoning models)
Tell the AI how to analyze your domain security scans
Provider Information
OpenAI
GPT-4, GPT-4o, GPT-4o-mini. Get key from platform.openai.com
Claude
Claude 3.5 Sonnet. Get key from console.anthropic.com
Gemini
Gemini Pro. Get key from aistudio.google.com
Grok
Grok-beta. Get key from x.ai
Profile Settings
Manage your account and white-label settings
Email cannot be changed
API Access
Use API keys to integrate with your systems
Two-Factor Authentication
Protect your account with an authenticator app (TOTP)
Loading…
White-Label Branding
Customize the platform appearance for your brand
PNG, JPG, WebP or GIF. Automatically resized; stored at max 200 KB.
When enabled, branding changes will apply to your public scans
Security
Password and account security
Threat Radar Monitoring
Domain squatting & certificate expiry monitoring
Loading…
⚠ Billing isn't wired up yet — subscribing activates monitoring immediately, no payment is collected today. A real payment step will be added before this is offered to paying customers.
Plans
Monitored Domains
You can monitor any domain you've already scanned with DomIntel.
Loading…
Billing History
Invoices & payment records
No billing history yet — real payment processing isn't wired up, so there's nothing to invoice. This will list every charge once billing goes live.
Help & Security Checks
Understanding our security analysis
✨ What DomIntel Does
DomIntel is an external domain-intelligence platform. Enter a domain and we run 100+ checks across DNS, email, TLS, web-security headers and network exposure — then grade it and show you exactly what to fix.
🔍 Scan a domain
On the Scan page, enter a domain and start the scan. You get a live progress view, then a full graded report. From the marketing page, a quick "teaser" scan shows the grade and issue counts before sign-in; the full report unlocks with a free account.
🔗 Subdomains & wildcard detection
We enumerate common subdomains and pull names from Certificate Transparency logs. If the domain uses a wildcard DNS record (*.domain), we detect it and exclude catch-all names so you see the real, distinct services — not dozens of false positives. The Subdomains card on a report shows the count; click to expand.
📊 Dashboard
Your stats at a glance — scans today/total, plan and a masked API key — plus grade distribution, your Top Scans, and an "All Scans" table grouped by domain. Each domain has a Scan History button that opens a score-over-time trend chart.
📋 History
Every scan you've run, paginated, with a scans-per-day timeline and week/month totals.
🏆 Leaderboard
Benchmark domains by grade. Your scans are private by default — only you see them. You can opt in to make them public (with explicit consent) to appear on the shared leaderboard, and switch back at any time.
📄 Reports & export
Export a scan as a self-contained branded HTML report, or print / save to PDF (the print output matches the on-screen theme). A premium report view gives a polished, client-ready assessment.
🔑 API access
Every account has an API key (see Profile / Settings) for programmatic scans via the /api/v1 endpoints.
🤖 AI analysis
AI-assisted remediation summaries are available to platform administrators for now, while we finalise availability across plans.
🛡️ Admin Console super-admins only
If your account has the platform-admin role, an Admin item appears in the top navigation:
Overview
Aggregate metrics — user counts, active users, scans per day, database size, backups and top users by volume.
Users
Search users, change plan or role, issue a last-resort password reset, and (audited) drill into a user's scanned domains. Sensitive actions require re-entering your password.
API Usage
Track external vendor calls (OpenAI, Anthropic, crt.sh) against configurable monthly limits, with a usage bar and status.
Scan Health
Queue state, scan throughput, and any stale / stuck scans you can clear.
Backups & Maintenance
Run backups, VACUUM / integrity-check / checkpoint the database, and restore from a snapshot (guarded).
💬 What can I do here?
"Scan my domain"
Scan page → enter the domain → view the graded report.
"Why did my score change?"
Open the domain's Scan History (Dashboard → All Scans → the 📈 button) for the score trend. If scans span different scoring models, we flag it.
"What are these subdomains?"
Click the Subdomains card on a report. Wildcard catch-alls are excluded and explained by the Wildcard DNS check.
"Make my scans public / private"
Leaderboard page → the Private / Public toggle (going public needs consent).
"Get my API key"
Profile (or Settings) → your API key.
"Export a report"
Open a scan → use the HTML / Print buttons, or the premium report.
"Understand a check"
Keep reading — every check is explained by category below.
📊 How We Calculate Your Score
Each security check is assigned a point value based on its importance to your domain's security. Your final score is the sum of all passing checks.
| Grade | Score Range | Description |
|---|---|---|
| A+ | 95-100% | Excellent security posture |
| A | 90-94% | Very strong security |
| B+ | 80-89% | Good security with minor issues |
| B | 75-79% | Acceptable security |
| C+ | 70-74% | Needs attention |
| C | 60-69% | Several security issues |
| D | 50-59% | Significant vulnerabilities |
| F | Below 50% | Critical security issues |
🌐 DNS Security
These checks verify your domain's DNS configuration, which is critical for directing traffic and email delivery.
A Record
Checks if your domain has valid IPv4 addresses. Essential for website accessibility.
AAAA Record
Checks for IPv6 support, ensuring accessibility for modern networks.
NS Records (Nameserver Redundancy)
Verifies you have multiple nameservers for reliability. Single nameserver creates a single point of failure.
MX Records
Checks if mail exchange servers are configured for email delivery.
CAA Records
Certification Authority Authorization restricts who can issue SSL certificates for your domain, preventing unauthorized certs.
📧 Email Security
These checks ensure your domain is protected against email spoofing and phishing attacks.
SPF (Sender Policy Framework)
Verifies which mail servers are authorized to send email on behalf of your domain. Prevents attackers from sending emails pretending to be you.
SPF Policy
Evaluates the strength of your SPF policy. -all (hard fail) is recommended, while +all is weak and allows anyone to send email as you.
DMARC
Domain-based Message Authentication, Reporting & Conformance. Provides instructions to receivers on how to handle emails that fail SPF/DKIM checks.
DMARC Policy
reject is the strongest policy (recommended), quarantine treats suspicious emails as spam, none just monitors.
🔒 SSL/TLS Security
These checks verify your website's HTTPS configuration and certificate validity.
HTTPS
Verifies your website is accessible over secure HTTPS connections.
SSL Certificate Expiry
Monitors your SSL certificate validity period. Expired certificates cause browser warnings and break trust.
🛡️ HTTP Security Headers
These checks verify that your website sends proper security headers to protect visitors.
HSTS (HTTP Strict Transport Security)
Forces browsers to only connect via HTTPS, preventing downgrade attacks and cookie hijacking.
CSP (Content Security Policy)
Prevents cross-site scripting (XSS) attacks by controlling which resources can be loaded on your page.
X-Frame-Options
Prevents your site from being embedded in iframes, protecting against clickjacking attacks.
X-Content-Type-Options
Prevents browsers from MIME-sniffing content, reducing exposure to drive-by download attacks.
🔌 Network Security
These checks verify your network configuration and identify potentially dangerous open ports.
Open Ports
Checks for commonly exploited ports. Dangerous ports like FTP (21), Telnet (23), and SMB (445) should be closed if not needed.
SSH Access
Verifies SSH port availability for server administration.
📈 Understanding Your Grade
Your security grade is calculated based on the percentage of available security points you earn:
- 3 points - Critical checks (SPF, DMARC, SSL expiry, etc.)
- 2 points - Important checks (HSTS, NS redundancy, HTTPS, etc.)
- 1 point - Nice-to-have checks (IPv6, CSP, X-Frame-Options, etc.)
Passing a check with warning status earns half points.