DomainLens

Stop guessing about your domain's security posture. DomainLens gives you the full picture — instantly. Type in any domain name, IPv4 address, or IPv6 address and watch as DomainLens runs 27 security checks in seconds. There's no cloud middleman, no account to create, and no data leaving your device that you don't control. Every query goes directly from your device to free, public APIs. That's it. Whether you're a penetration tester scoping an engagement, a sysadmin hardening your infrastructure, a developer checking your deployment, or just someone who wants to know what a domain is really doing — DomainLens puts serious domain intelligence at your fingertips without the enterprise price tag. WHAT YOU GET IN A SINGLE SCAN • DNS & Advanced DNS — A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, PTR records plus DNSSEC, wildcard DNS, dangling CNAMEs, zone transfer exposure, and HTTPS/SVCB service bindings. • RDAP & Domain Identity — Structured registration data (RFC 9083) with EPP status codes, abuse contacts, and registrar history. • SSL/TLS Deep Dive — Full certificate chain, protocol negotiation, cipher suite evaluation, OCSP stapling, forward secrecy verification, and CT log lookups. • Security Headers & Cookies — HSTS, CSP, X-Frame-Options, COOP, COEP, Permissions-Policy, and cookie flags. • Email Security — SPF, DMARC, DKIM, MX posture, SMTP STARTTLS validation, DANE/TLSA, MTA-STS, and BIMI. • Attack Surface & Exposure — CVE correlation with EPSS scores and CISA KEV flags. Subdomain discovery. JavaScript endpoint extraction. • Infrastructure Intelligence — IP resolution, reverse DNS, GeoIP/ASN enrichment, CDN/WAF detection, RPKI validation, and DNSBL reputation. PRIVACY — No analytics, no crash reporting, no background sync. Scans stay on your device. No account. No subscription.