Domain Verity

Domain Verity is a domain configuration monitoring platform that continuously audits the external security posture of internet-facing domains. The platform performs automated scans across 70+ checks per domain, covering TLS/SSL configuration, email authentication protocols, HTTP security headers, DNS health, and certificate management.

Core monitoring capabilities include:

• TLS/SSL grading: protocol version analysis, cipher suite strength, key length validation, and HSTS enforcement
• Email authentication: SPF record analysis (including DNS lookup budget forecasting), DMARC policy enforcement checking, and DKIM key validation across 40+ providers
• HTTP security headers: CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and security.txt
• Certificate expiry monitoring with 30-day and 7-day warnings, issuer trust chain validation, and auto-renewal detection
• DNS health: CAA, DNSSEC, MX health, apex/www parity, IPv6 parity, and wildcard DNS exposure
• Subdomain takeover detection by matching dangling CNAME, NS, and MX records against 25+ claimable-provider signatures
• Domain registration and expiry monitoring via RDAP
• Blocklist and IP reputation checks against Spamhaus, Barracuda, SpamCop, and other DNSBLs
• Certificate Transparency log monitoring for shadow IT detection

The platform provides a unified dashboard with prioritised findings, remediation guidance, asset tagging, tiered alerting, and integrations with Slack, PagerDuty, Jira, Linear, and webhooks. An AI-generated findings summary feature is available on paid plans.

Domain Verity targets individuals, organisations, and MSSPs/MSPs managing multiple client domains. Pricing tiers range from a free Starter plan (1 domain, daily scans) to Business ($48/month, 50 domains, hourly scans) and Enterprise tiers.