Monitor SSL expiry and security headers for any domain with one API

Expired certificates still take down big sites every year. If you run an agency, a hosting panel or an uptime tool, you want cert expiry, DNS and a quick security check for every client domain, without running openssl in cron jobs.

SSL check

curl "https://domainkit-dns-ssl-whois-website-tech-lookup.p.rapidapi.com/ssl?domain=github.com" \
  -H "X-RapidAPI-Key: $KEY" \
  -H "X-RapidAPI-Host: domainkit-dns-ssl-whois-website-tech-lookup.p.rapidapi.com"

{"domain": "github.com", "valid": true, "days_remaining": 46,
 "issuer": {"organizationName": "Sectigo Limited"}, "protocol": "TLSv1.3",
 "san": ["github.com", "www.github.com"]}

Alert when days_remaining < 14 and you're done.

Website scan

/scan?domain=stripe.com returns the server, the detected technologies (Next.js, nginx), the redirect chain, and a security score based on HSTS, CSP, X-Frame-Options and similar headers. That's useful for sales prospecting ("your site is missing HSTS") and for client audits.

Also included

• /dns: A, AAAA, MX, TXT, NS, CNAME and SPF/DMARC in one call
• /whois: registrar, creation date and expiry (RDAP)

Free tier: 200 calls/month. DomainKit on RapidAPI