Domain Security Scanner
```markdown ComplianceLayer is a comprehensive domain security scanning API that evaluates the external security posture of any domain in a single API call. Built for MSPs, MSSPs, security teams, and developers who need automated external attack surface assessments without enterprise contracts. ## What It Scans Every scan runs 16 security modules and returns structured JSON: - **SSL/TLS** —…
Domain Security Scanner endpoints
| Method | Endpoint | Description |
|---|---|---|
| Scanning | ||
| POST |
quick_scan_free /v1/scan/free |
Scan any domain for free and get an instant security grade with top issues. Returns: - Overall score (0-100) and letter grade (A-F) - Per-module scores across 15 security… |
| GET |
scan_history /v1/scan/history |
Return scan history for your account with optional limit. Use for trend analysis and historical reporting. |
| GET |
view_sample_report /v1/scan/sample/demo-report |
Get a realistic sample compliance report for demonstration purposes. Returns a comprehensive example showing all report features. No scan quota consumed. |
| GET |
check_scan_progress /v1/scan/jobs/{job_id} |
Check the status of a scan job. Poll this endpoint until `status` is `completed` or `failed`. Status transitions: `queued` → `running` → `completed` (or `failed`) When completed,… |
| POST |
full_security_scan /v1/scan/ |
Queue a full security scan for a domain. Returns a job ID that you poll for results. This is the primary scan endpoint for paid plans. Runs all 15 security modules and produces a… |
| GET |
my_recent_scans /v1/scan/recent |
Return the 20 most recent scans for your account. Useful for building dashboards or tracking scan activity. |
| GET |
download_full_report /v1/scan/jobs/{job_id}/report |
Retrieve the complete security report for a finished scan job. Returns detailed findings across all 15 security modules with: - Per-module scores and grades - Individual findings… |
| Bulk Scanning | ||
| POST |
scan_multiple_domains /v1/batch/scan |
Scan up to 50 domains in a single request. Returns scored results sorted by risk. Ideal for: - **Vendor risk assessments** — Score your entire vendor list at once - **MSP… |
| POST |
compare_domains /v1/batch/compare |
Compare 2-5 domains head to head. Returns ranked results with a winner and per-module comparison matrix. Use cases: - **Competitive analysis** — How does your security stack up?… |
| Trust Badges | ||
| GET |
security_badge_json /v1/badge/{domain}.json |
Get badge data in JSON format for custom integrations and dashboards. |
| GET |
security_badge_svg /v1/badge/{domain}.svg |
Get an embeddable SVG badge showing a domain's security grade. Embed in your website, README, or email signature to showcase your security posture. Results cached for 1 hour. No… |
| Compliance Reports | ||
| GET |
compliance_history /v1/compliance/history/{domain} |
Track how a domain's compliance posture has changed over time. Returns historical snapshots showing score progression and issue resolution. Use for trend reporting, board… |
| GET |
score_trends /v1/compliance/trends/{domain} |
Get compliance score trends and summary statistics over a configurable time window. Shows improvement trajectory, score volatility, and module-level trends. Ideal for automated… |
| GET |
export_pdf_report /v1/compliance/reports/{job_id}/pdf |
Export a scan as a branded PDF compliance report. Ready for SOC 2 evidence collection, vendor risk assessments, and client deliverables. Includes executive summary, per-module… |
| Verification | ||
| GET |
verify_report /v1/verify/{report_id} |
Public endpoint to verify the authenticity of a ComplianceLayer scan report by its report ID (format: CL-XXXXXXXX). Returns basic scan metadata: domain, date, score, and grade.… |
| Other endpoints | ||
| GET |
verify_report /v1/verify/{report_id} |
Public endpoint to verify the authenticity of a ComplianceLayer scan report by its report ID (format: CL-XXXXXXXX). Returns basic scan metadata: domain, date, score, and grade.… |
| GET |
my_recent_scans /v1/scan/recent |
Return the 20 most recent scans for your account. Useful for building dashboards or tracking scan activity. |
| GET |
check_scan_progress /v1/scan/jobs/{job_id} |
Check the status of a scan job. Poll this endpoint until `status` is `completed` or `failed`. Status transitions: `queued` → `running` → `completed` (or `failed`) When completed,… |
| GET |
compliance_history /v1/compliance/history/{domain} |
Track how a domain's compliance posture has changed over time. Returns historical snapshots showing score progression and issue resolution. Use for trend reporting, board… |
| GET |
score_trends /v1/compliance/trends/{domain} |
Get compliance score trends and summary statistics over a configurable time window. Shows improvement trajectory, score volatility, and module-level trends. Ideal for automated… |
| GET |
view_sample_report /v1/scan/sample/demo-report |
Get a realistic sample compliance report for demonstration purposes. Returns a comprehensive example showing all report features. No scan quota consumed. |
| GET |
download_full_report /v1/scan/jobs/{job_id}/report |
Retrieve the complete security report for a finished scan job. Returns detailed findings across all 15 security modules with: - Per-module scores and grades - Individual findings… |
| GET |
scan_history /v1/scan/history |
Return scan history for your account with optional limit. Use for trend analysis and historical reporting. |
| POST |
full_security_scan /v1/scan/ |
Queue a full security scan for a domain. Returns a job ID that you poll for results. This is the primary scan endpoint for paid plans. Runs all 15 security modules and produces a… |
| POST |
quick_scan_free /v1/scan/free |
Scan any domain for free and get an instant security grade with top issues. Returns: - Overall score (0-100) and letter grade (A-F) - Per-module scores across 15 security… |
| GET |
export_pdf_report /v1/compliance/reports/{job_id}/pdf |
Export a scan as a branded PDF compliance report. Ready for SOC 2 evidence collection, vendor risk assessments, and client deliverables. Includes executive summary, per-module… |
| GET |
security_badge_json /v1/badge/{domain}.json |
Get badge data in JSON format for custom integrations and dashboards. |
| POST |
compare_domains /v1/batch/compare |
Compare 2-5 domains head to head. Returns ranked results with a winner and per-module comparison matrix. Use cases: - **Competitive analysis** — How does your security stack up?… |
| GET |
security_badge_svg /v1/badge/{domain}.svg |
Get an embeddable SVG badge showing a domain's security grade. Embed in your website, README, or email signature to showcase your security posture. Results cached for 1 hour. No… |
| POST |
scan_multiple_domains /v1/batch/scan |
Scan up to 50 domains in a single request. Returns scored results sorted by risk. Ideal for: - **Vendor risk assessments** — Score your entire vendor list at once - **MSP… |
Domain Security Scanner pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $49 / month | — |
|
| ULTRA Recommended | $149 / month | — |
|
| MEGA | $499 / month | — |
|