>

Domain Security Posture Checker — DNS, SPF, DMARC & TLS API

Reading Time: < 1 minute

Email spoofing and weak TLS are still everywhere. Security, due-diligence, and vendor-risk teams need a fast read on any domain's posture — SPF, DKIM, DMARC, DNSSEC, and TLS config — in bulk, without running five separate tools per domain.

What you get

Per domain as JSON: SPF/DKIM/DMARC records and validity, DNSSEC status, MX hosts, TLS version and certificate expiry, plus an overall posture score.

Sample input

{
  "domains": [
    "example.com",
    "acme.com"
  ]
}

Sample output

{
  "domain": "example.com",
  "spf": true,
  "dmarc": "reject",
  "dnssec": false,
  "tlsVersion": "1.3",
  "certExpiry": "2026-11-01",
  "postureScore": 82
}

Run it

Open the actor on Apify → Pay-per-result, $5/month free credit.

Bundle: related actors. Hub: cluster guide.

FAQ

What does it check?

SPF, DKIM, DMARC, DNSSEC, MX, and TLS configuration, summarized into a posture score.

Can I check many domains at once?

Yes — pass a list of domains.

Is it useful for vendor risk?

Yes — run a portfolio of vendor domains to flag weak email authentication or expiring certs.

How is it priced?

Pay-per-domain on Apify with $5/month free credit.