---
title: ToolRouter — Workflow
description: A multi-tool workflow showing how to combine ToolRouter tools for a complex task.
url: https://toolrouter.com/workflows/ssl-and-dns-audit
---
# SSL and DNS Audit

Audit SSL certificates, DNS configuration, HTTP security headers, and domain registration for security gaps.

SSL and DNS misconfigurations are among the most common causes of security incidents, from expired certificates causing outages to missing DMARC records enabling email spoofing. This workflow systematically audits every layer of your domain security configuration to catch issues before they become incidents.

The audit covers certificate validity and cipher strength, DNS security records (SPF, DKIM, DMARC, CAA, DNSSEC), HTTP security headers, and domain registration hygiene. Results are actionable, highlighting exactly which records need to be added or modified to meet security best practices.

**Tools:** dns-domain, security-httpx, whois-rdap, ip-geolocation
**Category:** security

## Steps

### 1. Inspect SSL/TLS Certificates

Check SSL/TLS certificate validity, expiration dates, chain of trust, and cipher suite configuration.

- **Tool:** dns-domain
- **Skill:** check_ssl
- **Input:** Domain name to inspect SSL certificates for.
- **Output:** Certificate details including issuer, validity period, chain status, and supported protocols.

### 2. Audit DNS Configuration

Examine DNS records including SPF, DKIM, DMARC, CAA, and DNSSEC configuration for security misconfigurations.

- **Tool:** dns-domain
- **Skill:** lookup_dns
- **Input:** Domain name and record types to query.
- **Output:** Complete DNS record set with security-relevant records highlighted.

### 3. Probe HTTP Security Headers

Analyze HTTP response headers for security configurations including HSTS, CSP, X-Frame-Options, and cookie flags.

- **Tool:** security-httpx
- **Skill:** probe_hosts
- **Input:** Domain endpoints to probe for security headers.
- **Output:** HTTP security header analysis with missing or misconfigured headers flagged.

### 4. Verify Domain Registration

Check domain registration details, registrar information, and expiration dates to ensure proper domain security.

- **Tool:** whois-rdap
- **Skill:** lookup_domain
- **Input:** Domain name to look up registration details.
- **Output:** WHOIS/RDAP data including registrar, registration dates, nameservers, and registrant information.

## Benefits

- Prevent certificate expiration outages with proactive monitoring
- Detect email spoofing risks from missing SPF/DKIM/DMARC records
- Identify weak cipher suites and protocol versions
- Verify domain registration is locked and properly configured
- Ensure HTTP security headers meet OWASP recommendations
