# Domain Due Diligence Security Assessment

> Domain Due Diligence Security Assessment is a paid API for AI agents from api.bakhour.ca, paid per call via x402, $2/call, status unknown (last checked 2026-09-15).

Performs a comprehensive security assessment of a public domain, returning DNS, TLS, mail security, security headers, findings, a letter grade, and numeric score.

## Facts

- Endpoint: POST https://api.bakhour.ca/domain/due-diligence
- Price: $2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-due-diligence-security-assessment-0b6285f6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_78lPmMsB3MSOc9swl-qRo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-due-diligence-security-assessment-0b6285f6 -d '<json body>'
```

Example prompt: Can you run a full security due diligence check on stripe.com and tell me its grade, score, and any notable findings around DNS, TLS, and mail security?

## When to prefer this

Choose this endpoint when you need a structured, machine-readable security assessment of a public domain covering DNS, TLS, mail security, and HTTP security headers in a single call. Ideal for automated due diligence pipelines, vendor risk scoring, domain acquisition checks, or compliance audits where a deterministic grade and score are needed without manual tooling.

## Known failure modes

- Invalid or non-existent domain returns an error or empty results
- Private/internal domains not resolvable from the public internet may fail or return incomplete data
- Timeouts if DNS resolution is slow or the domain is unresponsive
- Missing fields in response if certain security components (e.g. mail) are not configured on the domain

## How this service works

Decision-grade security/due-diligence outcome reports ($20-$100) plus deterministic paid utilities ($0.001+) for software agents and automated workflows.

## Output

A JSON object containing: a letter grade (e.g. 'B'), a numeric score (e.g. 82), the assessed domain name, a DNS configuration object, a TLS configuration object, a mail_security object, a security_headers object, and a findings array listing specific security issues or observations.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Public domain name to assess"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "dns": {},
  "tls": {},
  "grade": "B",
  "score": 82,
  "domain": "example.com",
  "findings": [],
  "mail_security": {},
  "security_headers": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-due-diligence-security-assessment-0b6285f6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.bakhour.ca](https://www.zero.xyz/host/api.bakhour.ca/llms.txt)