Domain Kit

Domain diagnostics for the sites your team maintains

Domain diagnostics help you understand configuration issues before they turn into long support threads. MonitoraWeb's Domain Kit brings DNS, email authentication, security headers, basic site performance signals, technology detection, and WordPress checks into one place.

Explore Domain Kit Free X-ray

What domain diagnostics can check

44 checks per site

Certificate (validity, TLS version, and certificates issued for your names in public CT logs), DNS (records, DNSSEC, and CAA), email (MX, SPF, DKIM, DMARC, and blacklists), security (headers, mixed content, and Google Safe Browsing), SEO (robots, indexability, meta tags, sitemap, and hreflang), network (IP, reverse DNS, ASN, country, CDN, redirects, HTTP protocol, and compression), domain (WHOIS, age, expiry risk, and transfer lock), and more: technologies, analytics, social profiles, contact details, page weight, carbon footprint, PageSpeed (Lighthouse), and the Wayback Machine archive.

A grade from A to F

Each site gets a score out of 100: availability 25, security 25, domain 20, email 15, and SEO 15. A is 90 or more; F is under 40. If fewer than 60 % of the checks could run, there is no grade, because an F caused by a timeout on our side would be unfair.

Changes detected and alerted

Every run is compared with the previous one: 73 kinds of change, from a new IP or new name servers to a removed DMARC policy, a noindex that appeared, or a blacklist listing. For each monitor you choose which levels alert you: critical, warning, notice, or improvement.

Technical sheet and history

Each monitor has a sheet with the latest result of every check, plus a change history with filters and CSV export. The same data is available through the API for your own dashboard.

WordPress

On a WordPress site we read the version, the theme, and the plugins visible on the home page, and whether the REST API exposes user names. The WordPress version is matched against a public vulnerability database, and we tell you how many issues an update would fix. Plugins are detected, but their vulnerabilities are not checked. Only exposed files and open ports require a verified domain, because they look inside the server. This is not a penetration test and does not protect the site from attacks.

Technical sheet  tienda-ejemplo.com   Grade B · 81/100

IP            104.18.32.115  · Ashburn, US  · AS13335
Domain       expires 2027-03-14  548 days left
SSL           Let's Encrypt     expires in 19 days
DNS           Cloudflare        2 name servers
Email        SPF ok  DKIM ok  DMARC missing
Headers     HSTS ok  CSP missing  X-Frame ok
WordPress     6.7 · 9 plugins visible  core: 2 flaws, fixed by updating

Change        12-10  the DMARC policy was removed

Domain and SSL expiration shouldn't be a surprise

Expired SSL certificates can trigger browser warnings. Domain expiration can create an even larger operational problem. MonitoraWeb includes domain and SSL expiration notices on every plan, including Free: for the domain, by email 30 and 7 days ahead; for the certificate, through the monitor's channels with the lead time you choose for each one (the WhatsApp and email lists only speak up at 3 days or once expired). Peru's .pe domains are covered too, in their own way: NIC.PE doesn't publish their expiration date, so there is no advance notice, but if the domain stops answering in DNS we tell you it may have expired.

With the Kit, the domain portfolio puts them all in one list: expiry, registrar, and transfer lock, with filters (expiring in 30 or 90 days, expired, no date, unlocked), CSV export, and an .ics calendar for your schedule. Paste a list of domains or upload a CSV and it creates their monitors in one go.

How each alert works: SSL certificate expiry monitoring and domain expiration monitoring.

Need a quick answer instead of an ongoing workflow?

Use the free DNS, WHOIS, SSL, IP, email authentication, header, and redirect tools without creating an account. You can also generate a free website X-ray report and download a PDF. The complete Domain Kit is included in Pro and Agency.

Pair it with website uptime monitoring and downtime alerts on the same dashboard.

Browse free tools View plans

Frequently asked questions

Does Domain Kit check SPF, DKIM, and DMARC?

Yes. These email authentication records are included alongside DNS-related diagnostics.

Are SSL expiration alerts included on Free?

Yes. Domain and SSL expiration notifications are part of every MonitoraWeb plan.

Can Domain Kit scan any website for vulnerabilities?

Most of the Kit only reads what a site shows to anyone, so it works on any site, including matching the WordPress version against known vulnerabilities. The checks that look inside the server (exposed files and open ports) only run on domains you verify as yours.

Does it include WordPress checks?

Yes. It reads the WordPress version, theme, and visible plugins, and checks the WordPress core version against known vulnerabilities. Plugins are detected, but their vulnerabilities are not checked.

Can I run a free check without signing up?

Yes. There are 11 free web tools available without an account, plus a free downloadable X-ray PDF report.