DomainRisk.io
Continuous Domain Security Monitoring·domainrisk.io
DomainRisk.io is a domain security monitoring platform that runs 50+ checks across WHOIS, DNS, SSL/TLS, email authentication and subdomains for a domain portfolio. It correlates findings into named attack scenarios, computes an explainable weighted Global Security Score and a 90-day Volatility Score, and delivers change alerts plus audit-ready PDF/CSV reports.
What it's for
Features 17
- 13-section audit-ready PDF reports
- 50+ deterministic security checks across WHOIS, DNS, SSL/TLS, email auth and subdomains
- 90-day Volatility Score for domain stability tracking
- Change Detection & Audit Timeline with snapshot diffs
- Configurable per-domain alert thresholds
- CSV exports
- Deterministic Attack Scenario Generator with 8 named scenarios
- DNSSEC status tracking
- Email and webhook alerts with enriched JSON payloads
- Explainable Global Security Score across 3 weighted axes (Exploitable Risk 50%, Hardening Gaps 30%, Governance 20%)
- HTTP security header audit (HSTS, CSP, X-Frame-Options, etc.)
- MTA-STS and TLS-RPT posture analysis
- Multi-stage domain expiration alerts
- Registrar lock and unauthorized transfer detection
- RFC1035 DNS zone import for exhaustive coverage
- Scenario event notifications (new, escalation, resolution, regression)
- Subdomain discovery and takeover detection
Pricing
Custom/higher-volume setups available via contact/quote (not a listed price).
Evaluate the full monitoring stack on a focused domain set at no cost.
1 monitored domain, weekly scan frequency, 1/month PDF report, 1/month manual refresh, no webhook endpoints
For individuals and small teams tracking an active domain portfolio.
5 monitored domains, daily scan frequency, unlimited PDF reports, 10/month manual refresh, 1 webhook endpoint
Most Adopted plan for security teams requiring daily monitoring, priority scans and scale.
25 monitored domains, daily priority queue scans, unlimited PDF reports, 50/month manual refresh, unlimited webhook endpoints
For MSSPs and consultants managing multiple client portfolios.
100 monitored domains, hourly priority queue scans, unlimited PDF reports, unlimited manual refresh, unlimited webhook endpoints