Bulk-check SSL expiry, DMARC, SPF, MX across 100 domains in one screen
If you manage more than 10 domains, spreadsheet-tracking SSL expiry is how you accidentally let one lapse. The Bulk Domain Checker gives you a side-by-side table for up to 100 domains.
If you manage 10+ domains, hand-checking SSL expiry on each one is how you accidentally let one of them lapse. The Bulk Domain Checker takes up to 100 domains at once and gives you a side-by-side audit table in under a minute.
What you get
Paste a list of domains - newline or comma-separated. The tool runs four key checks per domain in parallel and returns one row each:
- SSL - days until expiry, issuing CA, pass/warn/fail status
- DMARC - policy (
none/quarantine/reject) - SPF - record presence +
+allwarning - MX - does the domain accept mail, and from where
- Overall - worst-status roll-up per domain so you can sort broken domains to the top
Signed-in users can check up to 100 domains. Anonymous is capped at 25. Both are free during early access.
Typical use cases
- Agency quarterly review. Paste all client domains, screenshot the table, done. Old versions of this workflow required spreadsheets +
openssl s_clientscripts. - Acquisition due diligence. Got 50 new domains in an M&A? Bulk-check them before you inherit an expired cert on closing day.
- M&A inventory cleanup. Find the orphan domains that nobody's been monitoring - expired SSL, missing DMARC, silent MX. Those are the next incident.
- Hosting migrations. Confirm every domain in scope is still serving the old cert (or the new one) the day of cutover.
From one-shot to daily monitoring
Bulk check is great for point-in-time audits. For continuous coverage, save domains to DomBrains - we run 8 tools per saved domain every morning at 6am UTC and alert on SSL threshold crossings (60 / 30 / 14 / 7 / 1 days, per-domain configurable; 90-day certs only from 14 days, see SSL certificate monitoring). One breakage = one email, not a quarterly discovery.
Paste your domains now: /tools/bulk-checker.
Want to see what one row of that audit expands into? /d/github.com shows the issuer, days left and TLS version for a single domain, next to its DMARC, SPF, DNSSEC and security headers.
Want it scriptable?
If you need the same data programmatically (for a dashboard, a CI check, or a weekly Slack post), the REST API exposes every tool at /api/v1/check/ssl/yourdomain.com. One bearer token, 60 req/min, 10-minute cache. A shell loop over your domain list gets you a structured JSON report per domain in seconds.