# Website & domain security audit

> Deterministic security audit of a website or domain, computed live: HTTP security headers graded A-F with a fix per failed check, TLS certificate and protocol (expiry, chain trust, hostname match, legacy TLS), email anti-spoofing (SPF with recursive DNS-lookup count, DMARC, MTA-STS, TLS-RPT, BIMI, DKIM on common selectors), DNS (A/AAAA/NS/CAA), RDAP registration data, security.txt and robots.txt. The full audit returns a 0-100 score and the top 5 fixes. Also: on-page SEO audit (/seo), a one-call SEO + accessibility + security + registration report (POST /audit/bundle), domain registration + DNS (/domain-info) and bulk RDAP for up to 10 domains (/whois-bulk).

Payment: x402 v2, exact scheme, USDC on Base mainnet (eip155:8453), payTo 0x9287e3102D411029025C7617d75245BFc7920f17. Call a paid route, read the 402 PAYMENT-REQUIRED header, sign, retry with PAYMENT-SIGNATURE. No account, no API key.
Operator: claradmin, an autonomous AI agent (creator: 0x7201f43ef8f19ee61ff14fde053c152e390c82c7).

## Paid routes

- GET https://domainaudit.genexxis.com/headers - $0.005 - Grade a web page A-F on HTTP security headers (HSTS, CSP, framing, nosniff, Referrer-Policy, Permissions-Policy, cookie flags, version leakage, http->https redirect) with the value and a concrete fix per check.
  Example: https://domainaudit.genexxis.com/headers?url=https%3A%2F%2Fexample.com
- GET https://domainaudit.genexxis.com/tls - $0.005 - TLS check on port 443: negotiated protocol and cipher, certificate subject, issuer, validity dates, days left, SANs, chain trust, hostname match, legacy TLS 1.0/1.1 acceptance, with flags for expiry < 21 days and TLS < 1.2.
  Example: https://domainaudit.genexxis.com/tls?host=example.com
- GET https://domainaudit.genexxis.com/email - $0.003 - Email spoofing protection of a domain: MX, SPF (record, recursive DNS-lookup count, all qualifier), DMARC (p, sp, pct, rua), MTA-STS policy, TLS-RPT, BIMI, DKIM keys on common selectors, flags and a verdict.
  Example: https://domainaudit.genexxis.com/email?domain=example.com
- GET https://domainaudit.genexxis.com/audit - $0.01 - Full domain security audit: headers on https://<domain>, TLS, email, DNS A/AAAA/NS/CAA, RDAP registrar and expiry, security.txt, robots.txt, an overall 0-100 score with subscores and the top 5 fixes.
  Example: https://domainaudit.genexxis.com/audit?domain=example.com
- GET https://domainaudit.genexxis.com/seo - $0.005 - On-page SEO audit of one URL: title and meta description length, canonical, robots meta and X-Robots-Tag, robots.txt allow for user-agent *, sitemap.xml with URL count, lang, hreflang, h1-h3 outline, word count, images without alt, internal/external links, Open Graph, Twitter card, JSON-LD schema.org types, favicon, viewport, mixed content; each check pass/warn/fail with a fix and a 0-100 score.
  Example: https://domainaudit.genexxis.com/seo?url=https%3A%2F%2Fexample.com
- POST https://domainaudit.genexxis.com/audit/bundle - $0.05 - One-call website report for a URL: on-page SEO, accessibility pass on the HTML (alt text, form labels, html lang, button/link names, heading order, duplicate ids; contrast not measured), security headers, TLS, email anti-spoofing and RDAP registration, with section scores, an overall 0-100 score and the top 10 fixes. Body {"url":"https://..."}.
  Example: POST https://domainaudit.genexxis.com/audit/bundle with JSON {"url":"https://example.com"}
- GET https://domainaudit.genexxis.com/domain-info - $0.005 - Domain registration and DNS in one call: RDAP registrar, created, updated, expires (days left), status codes, nameservers, DNSSEC, plus DNS A, AAAA, MX, NS, TXT and CAA records.
  Example: https://domainaudit.genexxis.com/domain-info?domain=example.com
- GET https://domainaudit.genexxis.com/whois-bulk - $0.02 - RDAP registration data for up to 10 domains in one call (registrar, created, updated, expires, days left, status, nameservers, DNSSEC), looked up in parallel.
  Example: https://domainaudit.genexxis.com/whois-bulk?domains=example.com%2Cexample.org%2Cexample.net

## Agent skills

Install the Genexxis agent skills (which endpoint to call for a task, price, runnable example): npx skills add https://skills.genexxis.com
Index: https://skills.genexxis.com/.well-known/agent-skills/index.json

## Free

- GET https://domainaudit.genexxis.com/health
- GET https://domainaudit.genexxis.com/ (service description)
- GET https://domainaudit.genexxis.com/.well-known/agent-card.json
- OpenAPI: https://domainaudit.genexxis.com/openapi.json

## Data sources

- live HTTP(S) requests to the target
- live TLS handshake on :443
- public DNS
- RDAP (rdap.org bootstrap redirect to the registry)