{ "openapi": "3.0.1", "info": { "title": "Domain Security Scanner: SSL, DMARC, Subdomains, Tech Stack", "description": "Passive security report for a domain: SSL/TLS, headers, SPF/DKIM/DMARC, subdomains, tech stack and known CVEs, scored 0-100 with fixes. Use this when vetting a vendor or your own domain.", "version": "0.0", "x-build-id": "L3zWWL8MUXRPeRXsr" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/s3nafps~domain-exposure-intel/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-s3nafps-domain-exposure-intel", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/s3nafps~domain-exposure-intel/runs": { "post": { "operationId": "runs-sync-s3nafps-domain-exposure-intel", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/s3nafps~domain-exposure-intel/run-sync": { "post": { "operationId": "run-sync-s3nafps-domain-exposure-intel", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "mode": { "title": "Mode (which tool to run)", "enum": [ "full_report", "tech_stack", "subdomains", "email_security", "tls", "diff" ], "type": "string", "description": "Pick one. full_report ($0.08): everything in one scored report with a prioritized fixes array (use for due diligence, vendor risk, 'is this domain healthy?'). tech_stack ($0.015): technologies with version, confidence, evidence. subdomains ($0.02): certificate-transparency subdomains, live/dead, takeover candidates. email_security ($0.005): SPF/DKIM/DMARC/MTA-STS/BIMI with fixes (use for spoofing/phishing risk). tls ($0.005): certificate, protocol, HSTS/CSP and other headers, security.txt. diff ($0.02, first baseline free): only what changed since the last run of this mode for the domain (use on a weekly schedule). Nothing is charged when the result has no data (outcome no_match, unavailable or error).", "default": "full_report" }, "domain": { "title": "Domain (single)", "type": "string", "description": "One domain or URL, e.g. example.com or https://www.example.com/path. Shortcut for agents; for several domains use 'domains'. Subdomains are accepted: TLS and tech use the host as given, DNS/RDAP/email/subdomain checks use its registrable domain." }, "domains": { "title": "Domains (bulk)", "maxItems": 100, "type": "array", "description": "List of domains to check. One dataset item is produced per domain, each charged separately when it contains data. At most 100 entries (also capped by 'Max domains').", "items": { "type": "string" } }, "maxDomains": { "title": "Max domains", "minimum": 1, "maximum": 100, "type": "integer", "description": "Safety cap on how many domains from the list are processed (max 100).", "default": 25 }, "maxSubdomains": { "title": "Max subdomains to resolve", "minimum": 1, "maximum": 500, "type": "integer", "description": "Subdomains found in certificate transparency logs are all counted, but only this many are resolved live/dead and checked for takeover (max 500).", "default": 100 }, "includeVulns": { "title": "Include CVE matching", "type": "boolean", "description": "In full_report and diff, map detected technology versions to CVEs (OSV.dev, NVD), CISA KEV and EPSS. Versions are 'detected', never 'confirmed'.", "default": true }, "dkimSelectors": { "title": "Extra DKIM selectors", "maxItems": 20, "type": "array", "description": "Additional DKIM selectors to check besides ~26 common ones (e.g. a custom selector used by your mail provider). Max 20.", "items": { "type": "string" } }, "snapshotStoreName": { "title": "Snapshot store name (diff mode)", "type": "string", "description": "Named key-value store that holds one snapshot per domain for diff mode. Keep the same name across scheduled runs.", "default": "domain-exposure-snapshots" }, "updateBaseline": { "title": "Update baseline after diff", "type": "boolean", "description": "In diff mode, replace the stored snapshot with the current state after reporting changes. Turn off to keep comparing against a fixed baseline.", "default": true }, "maxConcurrency": { "title": "Concurrent domains", "minimum": 1, "maximum": 10, "type": "integer", "description": "How many domains are checked in parallel (max 10).", "default": 5 }, "requestTimeoutSecs": { "title": "Request timeout (seconds)", "minimum": 3, "maximum": 30, "type": "integer", "description": "Timeout for each network request; every request is retried with backoff (max 30).", "default": 10 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }