DomainRisk.io

DomainRisk.io is a domain risk intelligence platform that performs continuous security monitoring for domain portfolios. It executes over 50 checks across WHOIS, DNS, SSL/TLS, email authentication, and subdomains, then correlates the results into named attack scenarios and a 90-day volatility signal. The platform generates an explainable weighted security score from 0 to 100, with every deduction tied to a concrete remediation action.

An explainable security score combines three weighted axes: exploitable risk at 50 percent, hardening gaps at 30 percent, and governance at 20 percent. Critical findings automatically cap the overall score at 30 to ensure severe risks remain visible. A deterministic correlation engine, operating without AI, maps combinations of findings to eight named attack scenarios that include email spoofing risk, DNS hijack signal, brand impersonation, and admin takeover. Each scenario specifies the attack vector, impact, likelihood, and supporting evidence.

The volatility score tracks domain stability over 90 days using weighted signals such as registrar changes, nameserver flips, SSL invalidation, and DNS shifts. Every scan compares against the prior snapshot, logging DNS record changes, ASN routing shifts, score drifts of 10 points or more, and new critical findings to an auditable timeline. Alerts for raw findings and attack scenario events are sent by email and webhook, delivering enriched JSON payloads containing model version, top factors, and recommended actions suitable for SIEM, Jira, or PagerDuty systems. Audit-ready PDF reports span 13 sections covering executive summaries, attack scenarios, scored findings, DNS and WHOIS evidence, HTTP security header audits, subdomain inventories, change timelines, recommended actions, and compliance checklists, with CSV exports also available.

The service requires no agents or API keys. Users add any registered domain without TLD or registrar restrictions, select daily or weekly scan frequency, set alert thresholds, and choose notification channels. It addresses the needs of security operations centers, managed security service providers, IT risk and compliance teams, and professionals performing vendor due diligence or acquisition screening. A free account with full monitoring capability is available immediately without a credit card or time limit.