# Agent402 Domain Security Audit Pro

> Agent402 Domain Security Audit Pro is a paid API for AI agents from agent402.tools, paid per call via x402, $0.85/call, status unknown (last checked 2026-09-14).

Performs a comprehensive domain security audit covering TLS, email authentication (SPF/DKIM/DMARC), HTTP security headers, and synthesizes an AI-generated graded report with composite score.

## Facts

- Endpoint: POST https://agent402.tools/v1/domain-audit/pro
- Price: $0.85/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-domain-security-audit-pro-8fdc0208
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gTf34aQmntUt762UmYCYR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-domain-security-audit-pro-8fdc0208 -d '<json body>'
```

Example prompt: Can you run a full domain security audit on stripe.com and give me the report in markdown — I want to see the grade, composite score, and any issues with email authentication or HTTP headers?

## When to prefer this

Choose this endpoint when you need a comprehensive, AI-synthesized domain security report covering TLS, email authentication, and HTTP headers in one call, rather than running separate DNS lookup, header inspection, or certificate check tools individually. Especially valuable when you need a human-readable graded report suitable for sharing with stakeholders, or structured JSON for programmatic security scoring pipelines. Prefer over generic DNS tools when email deliverability and security posture need to be evaluated together.

## Known failure modes

- Invalid or non-existent domain returns an error or empty result
- Domain with no DNS records may produce incomplete scores
- Network timeouts during live DNS or TLS probes may cause partial results
- Malformed input (e.g. passing a path instead of a hostname) may result in a 400 error
- Rate limiting or payment failure over x402 protocol returns 402 Payment Required

## How this service works

The deeper tier: everything in the standard audit plus the attack surface from Certificate Transparency logs (subdomains), the detected tech stack, and domain registration, in a longer graded report with a fuller remediation plan. USDC or card (Stripe). Not cached.

## Output

Returns a structured report containing: an overall letter grade (A–F), a composite score (0–100), sub-scores for email authentication and HTTP security headers, TLS certificate days remaining, per-check result tables (e.g. SPF pass/fail with detail), and a full AI-synthesized narrative report. Available as a markdown document or structured JSON object.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "The domain to audit, e.g. example.com (also accepts a URL or host)."
  },
  "format": {
   "enum": [
    "markdown",
    "json"
   ],
   "type": "string",
   "description": "Response shape (default markdown report)."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "meta": {
   "tier": "domain-audit-pro",
   "grade": "B",
   "domain": "example.com",
   "composite": 82,
   "email_score": 90,
   "header_score": 70,
   "synthesis_model": "anthropic/claude-opus-5",
   "tls_days_remaining": 204
  },
  "grade": "B",
  "domain": "example.com",
  "report": "# Domain Security Audit: example.com\n\n**Overall grade: B** (82/100)\n\n## Overall grade\n...",
  "tables": [
   {
    "name": "email-checks",
    "rows": [
     [
      "spf",
      "pass",
      "SPF record present, 1 DNS lookup, ~all qualifier"
     ]
    ],
    "label": "Email authentication checks",
    "columns": [
     "Check",
     "Status",
     "Detail"
    ]
   }
  ],
  "sources": [],
  "composite": 82
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-domain-security-audit-pro-8fdc0208/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)