Domain / Website Health Score
Enter a domain to run five checks — DNS resolution, SSL certificate trust, SPF, DMARC, and key security response headers — and get back a combined score with a plain breakdown of what passed and what didn't.
Overview
A domain's health is spread across several unrelated systems: DNS has to resolve, the SSL certificate has to be valid and trusted, SPF and DMARC records need to exist so mail sent from the domain isn't easily spoofed, and the site's own HTTP responses should carry basic security headers like HSTS. Checking each of these individually across five separate tools works, but it's easy to miss one. This tool runs all five checks in one pass and rolls them into a single score out of 100, with the detail for each check shown underneath so you know exactly what's contributing to the number.
Each check is weighted equally at 20 points. A check that fails or can't be verified scores 0 for that category rather than blocking the others — the final score always reflects everything that could be checked, even if one lookup times out.
Examples
Checking a domain's overall health
example.com
Health score: 80/100 (Grade B) — DNS OK, SSL OK, SPF missing, DMARC OK, Security headers OK
How It Works
- Enter a domain name (no https:// or path).
- Complete the verification checks — the tool makes two outbound requests to your domain (SSL and header checks) that each need one.
- Click Check to run all five checks.
- Review the total score and grade, then read the breakdown to see which category is holding the score down.
Use Cases
Pre-launch domain checklist
Confirm DNS, SSL, and mail-authentication records are all in place before pointing real traffic or email at a new domain.
Quick client or vendor domain audit
Get a fast, shareable snapshot of a domain's basic health without running five separate tools by hand.
Tips
- A missing SPF or DMARC record doesn't break a working website, but it does make the domain's email easier to spoof — treat those two categories as a mail-security score, not a website-uptime score.
- For a deeper look at any single category, use the dedicated tool for it — SSL Checker, SPF Checker, DMARC Checker, or HTTP Header Checker all show far more detail than fits in this summary.
FAQ
No. Each check calls the same public lookup endpoints used by the individual DNS Lookup, SSL Checker, SPF Checker, DMARC Checker, and HTTP Header Checker tools, and nothing about the request is stored beyond their normal short-lived caching.
The SSL and HTTP header checks each make their own outbound request to your domain and are independently rate-limited and bot-checked, the same as when you run them as standalone tools — so each needs its own verification pass.
Five categories — DNS, SSL, SPF, DMARC, and security headers — are each worth 20 points. A category scores 0 if the check fails, can't be reached, or the record/header is missing, and full points if it passes.
10 points for a Strict-Transport-Security header being present, and 10 points for an X-Content-Type-Options header being present, on the response from https:// your domain.