audit_domain
Perform comprehensive domain audit combining DNS security analysis, live HTTP security headers, and technology fingerprinting for full recon and active checks.
Instructions
Perform comprehensive domain audit: combines domain_report + live HTTP security headers + technology fingerprinting. By default report.dns.txt is filtered to security-relevant entries (SPF, DMARC, DKIM, MTA-STS, TLS-RPT) and report.dns.total_txt_records reports the honest pre-filter count; pass include_all_txt=true for the raw TXT list. Use when you need the full picture (recon + active checks); use domain_report for passive-only assessment. Response carries next_calls — chain with subdomain_enum (always emitted) and ssl_check (when an A record resolves) for the residual recon depth (tech_fingerprint already inline as technologies). Free: 100/hr (costs 4 credits), Pro: 1000/hr. Returns {domain, report, technologies, live_headers, summary, next_calls}.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Root domain to audit, without protocol or path (e.g. 'example.com', 'shopify.com') | |
| include_all_txt | No | Return every TXT record under report.dns.txt (default: False, only SPF/DMARC/DKIM/MTA-STS/TLS-RPT kept). report.dns.total_txt_records is always emitted with the honest pre-filter count. Default filter strips vendor verification strings (google-site-verification, ms=, facebook-domain-verification, etc.) that bloat the response without security signal. Set True only when you need the raw TXT inventory. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |