Domain Posture
From $29 onceActively maintained
not read yet
Use
- For
- Security teams, consultants and GRC staff checking external domain posture for audits and client reviews
- Price
- From $29 oncepricing page, read Oct 24, 2026
- Activity
- Actively maintainedsite updated 4 days ago
- Used for
- Check a domain's email authentication, TLS, DNS and security headers
- Produce dated, signed posture reports for client audits or questionnaires
- Re-scan client domains on a schedule and get drift alerts
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsdomainposture.com ↗
From $29 once
- Certifications they stateSOC 2 · ISO 27001trust center ↗
- Trust centertheir owntrust center ↗
- Security contactsecurity.txt
These are Domain Posture's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.domainposture/mcpverified in the MCP registry
- Stateanswers, 22 toolschecked 2026-10-24
- Address to connectwww.domainposture.com/mcp/mcp
- MCP docsdomainposture.com/ai/rankings/mcp-serversthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Autonomous pentesting, continuous monitoringMCP · sign-in
Scans web apps, networks and cloud for vulnerabilities, then exploits them where supported to prove risk, with reports and an autonomous pentest agent.
107kActiveFrom $96/mo2017 - #2
Vanta
Automates compliance evidence collection and audit preparation across SOC 2, HIPAA, ISO 27001, and other frameworks.
71.1kActiveContact sales - #3
PalisadeMCP · sign-in
Reads DMARC aggregate reports, flags SPF and DKIM failures per sender, and writes approved DNS record fixes into your zone.
3.4kActiveFrom $19/mo - #4
IndiciaMCP · sign-in
Runs OSINT searches across breach dumps, person records, social platforms and network infrastructure from one query, with an agent driving a browser.
2.1kActiveFrom $1 per use - #5
XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017 - #6
DomainScan AI
Monitors SSL certificates, DNS records, DMARC policies, and domain security threats with automated alerts and fixes.
587ActiveFrom $9/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Domain Posture for?
Sign in to leave a noteWhat is Domain Posture?
Scans a domain's DNS, email authentication, TLS, security headers and AI crawler policy, and issues dated, signed reports. It is listed in the Atlas under Security.
Who is Domain Posture for?
Security teams, consultants and GRC staff checking external domain posture for audits and client reviews
How much does Domain Posture cost?
Paid plans start at $29 once, per Domain Posture's pricing page on 2026-10-24.
Do people use Domain Posture?
Little sign of use.
Is Domain Posture still maintained?
Actively maintained: site updated 4 days ago.
Is Domain Posture safe?
We do not audit vendors. What Domain Posture publishes, read 2026-10-24: SOC 2, ISO 27001 stated on its trust center.
What are alternatives to Domain Posture?
In Security, by use: Autonomous pentesting, continuous monitoring, Vanta, Palisade, Indicia, XposedOrNot, DomainScan AI.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.