域名安全审计API检查域名在DNS、HTTPS、TLS、证书、CAA记录、DNSSEC指标和常见网络安全头部的公共安全设置
该API返回安全分数、等级、检测到的发现、严重性级别、HTTP和HTTPS状态、TLS证书详情、DNS记录详情、DNSSEC状态、CAA状态、安全头部状态、使用信息、安全注意事项和免责声明
该API对于开发人员、SaaS开发者、IT顾问、网络机构、网络安全团队、域名监控服务、托管公司、合规服务、托管服务提供商以及监控客户或供应商域名的公司非常有用
该API仅执行被动检查。它不进行黑客攻击、暴力破解、尝试登录、扫描私有系统、修改DNS记录、安装证书或要求客户密码或私密信息
{"domain":"example.com","checked_at_utc":"2026-06-12T20:41:38.995259+00:00","score":61,"grade":"D","findings_found":8,"findings":[{"severity":"low","code":"missing_caa_records","message":"No CAA records were found for this domain."},{"severity":"medium","code":"http_not_redirecting_to_https","message":"HTTP does not redirect to HTTPS."},{"severity":"medium","code":"missing_strict_transport_security","message":"Missing security header: strict-transport-security."},{"severity":"medium","code":"missing_content_security_policy","message":"Missing security header: content-security-policy."},{"severity":"low","code":"missing_x_frame_options","message":"Missing security header: x-frame-options."},{"severity":"low","code":"missing_x_content_type_options","message":"Missing security header: x-content-type-options."},{"severity":"low","code":"missing_referrer_policy","message":"Missing security header: referrer-policy."},{"severity":"low","code":"missing_permissions_policy","message":"Missing security header: permissions-policy."}],"https":{"available":true,"http_to_https_redirect":false,"status_code":200,"final_url":"https://example.com"},"tls_certificate":{"available":true,"issuer":"countryName=US, organizationName=SSL Corporation, commonName=Cloudflare TLS Issuing ECC CA 3","subject":"commonName=example.com","not_before":"May 31 21:39:12 2026 GMT","not_after":"Aug 29 21:41:26 2026 GMT","days_until_expiry":78,"tls_version":"TLSv1.3"},"security_headers":{"strict-transport-security":{"present":false,"value":null},"content-security-policy":{"present":false,"value":null},"x-frame-options":{"present":false,"value":null},"x-content-type-options":{"present":false,"value":null},"referrer-policy":{"present":false,"value":null},"permissions-policy":{"present":false,"value":null}},"dns":{"a_records":["172.66.147.243","104.20.23.154"],"aaaa_records":["2606:4700:10::ac42:93f3","2606:4700:10::6814:179a"],"mx_records":["0 ."],"caa_records":[],"dnssec":{"ds_records_present":true,"dnskey_records_present":true}},"usage":{"customer_name":"rapidapi-proxy","plan":"rapidapi","requests_used":null,"monthly_limit":null,"usage_month":"2026-06","auth_type":"rapidapi_proxy_secret"},"source_notes":["HTTPS and security-header checks use passive public HTTP requests only.","DNS checks use passive public DNS lookups only.","TLS certificate checks use a standard TLS handshake to port 443 only.","No port scanning, exploit checks, login attempts, brute force, fuzzing, or bypass attempts are performed."],"disclaimer":"This result is informational and based only on passive checks of public domain, DNS, HTTPS, TLS, certificate, and HTTP-header information. It does not guarantee security, compliance, or absence of risk."}
curl --location --request GET 'https://zylalabs.com/api/12791/domain+security+audit+api/25121/domain+security+posture+audit&domain=Required' --header 'Authorization: Bearer YOUR_API_KEY'
| 标头 | 描述 |
|---|---|
授权
|
[必需] 应为 Bearer access_key. 订阅后,请查看上方的"您的 API 访问密钥"。 |
无长期承诺。随时升级、降级或取消。 免费试用包括最多 50 个请求。
域安全态势审计端点返回对域安全设置的全面评估,包括安全评分、等级、严重级别的发现以及有关HTTPS、TLS、DNS、DNSSEC、CAA记录和安全头的详细信息
响应中的关键字段包括“域名”,“checked_at_utc”,“分数”,“等级”,“发现的问题数量”,以及一个详细说明具体安全问题、其严重性和描述性信息的“发现”数组
响应数据以JSON格式构建,顶层字段提供汇总信息,以及一个嵌套的“发现”数组,列出各个安全问题,每个问题包含严重性、代码和消息
该端点提供有关域名安全得分 评分 与DNS HTTPS TLS CAA记录 DNSSEC状态 和安全头信息 帮助用户评估整体安全态势
典型的用例包括网站的安全审计 组织的合规检查 监控客户的域名安全以及识别漏洞以增强网络安全措施
用户可以通过在API调用中指定他们希望审计的域来自定义请求,从而根据其安全需求对特定域进行有针对性的评估
数据反映了在请求时公共DNS记录和域名安全设置的被动检查 结果可能会有所不同因为DNS记录 证书 标头和相关设置会发生变化
标准数据模式包括不同的严重性级别(低、中、高)用于发现常见问题如缺失的安全头或不正确的HTTPS配置使用户能够优先考虑修复工作
服务级别:
100%
响应时间:
1,429ms
服务级别:
100%
响应时间:
1,056ms
服务级别:
100%
响应时间:
219ms
服务级别:
100%
响应时间:
1,877ms
服务级别:
100%
响应时间:
1,301ms
服务级别:
100%
响应时间:
1,241ms
服务级别:
100%
响应时间:
796ms
服务级别:
100%
响应时间:
240ms
服务级别:
100%
响应时间:
213ms
服务级别:
100%
响应时间:
1,463ms