DomainLens Pro vs PassPony

DomainLens Pro is a one-tap domain reconnaissance toolkit for IT pros, security analysts, developers, and anyone responsible for a domain. Type any domain, IP, or URL and DomainLens Pro runs 24+ specialized probes in two parallel phases, then aggregates the results into a single color-graded report. Browse it across ten organized tabs: • Overview — A–F security grade with a confidence score, top remediation actions, and per-category breakdown • DNS & WHOIS — A, AAAA, MX, NS, TXT, SOA records, TTLs, registrar, expiry, name servers, registration history • Identity (RDAP) — RFC 9083 lookup, abuse contact, EPP statuses, transfer history, privacy-redaction detection • SSL / TLS — full certificate chain, validity, signature algorithm, SANs, OCSP stapling, forward secrecy, and post-quantum readiness (X25519MLKEM768 / SecP256r1MLKEM768) • Headers — HSTS preload eligibility, CSP nonce/hash analysis, X-Frame-Options, COOP, COEP, Referrer-Policy, Permissions-Policy • Email — SPF strict alignment, DKIM key strength, DMARC policy + alignment, MTA-STS, TLS-RPT, BIMI, DANE, full mail-server diagnostics • Web Stack — server fingerprint, technology detection, third-party JS / dependency inventory, JS-derived endpoint discovery • Exposure — sensitive file probes (.git, .env, robots.txt), CORS misconfigurations, dangerous HTTP methods, exposed login portals • Infrastructure — ASN, hosting provider, cloud platform (AWS/Azure/GCP/Cloudflare), CDN/WAF detection, GeoIP, anycast detection, RPKI validation, IPv4 + IPv6 reachability • Intel — DNSSEC validation, CAA records, HTTPS/SVCB records, dangling CNAME detection, zone-transfer test, Certificate Transparency subdomain enumeration, DNSBL reputation, CVE lookup against detected tech via NVD, historical drift tracking Also handles: • IPv4 / IPv6 reverse-lookup mode — paste an IP, get the domain back • Private network mode — paste an internal RFC 1918 IP and get ICMP/HTTP/HTTPS detection, OS fingerprint by TTL, ARP MAC vendor lookup, traceroute (full on Mac; iOS sandbox limits some probes) • Scan history with one-tap re-scan, offline browsing, sync across devices via Google Sign-In • Versioned scoring algorithm with confidence weighting and partial-result handling for slow targets • Post-quantum TLS twin probe to verify hybrid key-exchange support Built for security pros: • Full TLS pinning to the scan backend • No analytics, no ad SDKs, no third-party tracking • Sign-in is optional — without it, no personal data ever leaves the device• When you do sign in, choose any of: Apple, Google, Microsoft, GitHub, or a one-time email code (no passwords, ever)• Native iPhone, iPad, and Mac Catalyst layouts with platform-appropriate menus and Cmd+1–9 keyboard shortcuts on Mac No subscription. No upsell.

PassPony is a password manager for people who want to own their passwords. Every entry is one encrypted file in a store you control, in the same format as the pass and passage command line tools. Your Mac, your server, and your phone can all work on the same store. WHY A FILE-BASED STORE One entry, one file: the password on the first line, anything else after it. Encrypted with your keys: age identities for passage stores, OpenPGP keys for pass stores. Synced with git: clone your existing store, publish a new one, and resolve conflicts per entry, never with a silent merge. Interoperable: commits match the pass CLI format, so the store stays fully usable from the desktop tools. EVERYDAY USE QuickType autofill: your passes appear above the keyboard when you sign in. Only entry names are indexed; nothing decrypts until you fill. Live one-time codes: entries with an otpauth line show a TOTP code with a countdown ring. Face ID or Touch ID unlock, with a five-minute grace window shared with autofill. Ephemeral clipboard: copies are local only and clear after 45 seconds. Field-level editing that preserves the exact bytes of lines it does not touch. PRIVATE BY ARCHITECTURE No account, no signup, no PassPony server. The only network connection is the git remote you configure. No analytics, no ads, no tracking. Open source, Apache-2.0. The full app and its Rust core are published in a public git repository for anyone to audit. FORMATS passage stores encrypt with modern age identities. pass stores encrypt with OpenPGP keys (Cv25519 and X25519/Ed25519 in software). RSA-keyed stores need a smartcard, which is not supported yet. Each format keeps its own store; switching never touches the other. Localized in English, Spanish, French, German, Simplified Chinese, Brazilian Portuguese, and Russian. If you already run pass or passage, PassPony is the missing phone half of your setup. If you have never used them, the first-run tour will have you adding your first pass in about a minute.