# Domain Security Audit (Full Scan)

> Domain Security Audit (Full Scan) is a paid API for AI agents from domainaudit.genexxis.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-11-04).

Runs a comprehensive security audit on a domain covering HTTP headers, TLS, email protection, DNS records, RDAP registration, security.txt, robots.txt, and returns an overall 0-100 score with subscores and top 5 remediation actions.

## Facts

- Endpoint: GET https://domainaudit.genexxis.com/audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-04
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-security-audit-full-scan-39b80b66
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_y8n4vyc0pvRx8T1W8JKMR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-security-audit-full-scan-39b80b66
```

Example prompt: Can you run a full security audit on stripe.com and tell me the overall score, the letter grade, and what the top fixes are?

## When to prefer this

Choose this endpoint when you need a single comprehensive security snapshot of a domain covering all layers (HTTP headers, TLS, email, DNS, registration) in one call rather than querying separate specialized endpoints. It is ideal for security audits, vendor assessments, compliance checks, or pre-launch reviews where you want an overall grade and prioritized fix list without orchestrating multiple API calls.

## Known failure modes

- Domain does not exist or is unresolvable — returns error or empty DNS results
- Domain is unreachable on port 443 — TLS subscore fails or returns null
- Firewall or rate-limiting blocks header/TLS probes — partial results with missing subscores
- RDAP lookup fails for some TLDs — registration info may be absent
- Invalid domain format provided — returns validation error

## How this service works

Full domain security audit: headers on https://<domain>, TLS, email, DNS A/AAAA/NS/CAA, RDAP registrar and expiry, security.txt, robots.txt, an overall 0-100 score with subscores and the top 5 fixes.

## Output

Returns a JSON object with: an overall 0-100 security score and A-F letter grade, subscores for TLS, email headers, and DNS/registration, RDAP registrar details and domain age/expiry, DNS A/AAAA/NS/CAA records, TLS certificate info, security.txt and robots.txt presence, and an ordered list of the top 5 actionable security fixes with IDs, descriptions, and affected areas.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain, e.g. example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "grade": "D",
  "score": 58,
  "domain": "example.com",
  "topFixes": [
   {
    "id": "hsts",
    "fix": "Add Strict-Transport-Security: max-age=31536000; includeSubDomains",
    "area": "headers"
   }
  ],
  "subscores": {
   "tls": 95,
   "email": 100,
   "headers": 15,
   "dnsRegistration": 50
  },
  "registration": {
   "ageDays": 11393,
   "created": "1995-08-14T04:00:00Z",
   "registrar": "Example Registrar"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-security-audit-full-scan-39b80b66/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from domainaudit.genexxis.com](https://www.zero.xyz/host/domainaudit.genexxis.com/llms.txt)