Name: Website Audit API: Tech Stack, WHOIS, DNS and TLS
Brand: martindata
SKU: api-martindata-websiteintelligence-api
Availability: InStock
Author: API Market

# Website Audit API

## Overview

The Website Audit API checks a list of websites and returns one JSON row per domain with its technology stack, DNS records, WHOIS registration data, TLS certificate, redirect chain, sitemap size and company info. Optional checks add a Google Lighthouse audit and a homepage screenshot.

It is built for sales teams, agencies, SEO and security analysts who research or monitor many websites. Instead of calling separate WHOIS, DNS, SSL and tech-detection tools, one call returns all of it, with domain age and days to expiry for domains and certificates.

## Features

*   **Tech stack**: CMS, analytics, CDN, frameworks and more, with confidence scores.
*   **DNS and email**: A, AAAA, MX, NS, CAA, TXT and DMARC records.
*   **WHOIS**: registrar, creation and expiry dates, domain age and DNSSEC from RDAP.
*   **TLS**: certificate issuer, validity and days left.
*   **Redirects and sitemap**: redirect chain, final URL and sitemap URL count.
*   **Optional extras**: Lighthouse scores and a homepage screenshot.
*   **Rate limit**: up to 10 requests per second on every plan.

## Use Cases

*   **Lead research**: profile prospects' websites in bulk.
*   **Domain monitoring**: watch domain and certificate expiry.
*   **Agency audits**: audit a client's site in one call.
*   **Security reviews**: check DNS, DMARC and TLS settings.

## API Documentation

### Base URL

All requests go through the API.market proxy at this base URL:

```
https://prod.api.market/api/v1/martindata/websiteintelligence-api
```

### Authentication

Every request must include your API.market key in the `x-api-market-key` header:

```
x-api-market-key: YOUR_API_KEY
```

Replace `YOUR_API_KEY` with your actual API key.

### Endpoints

#### 1. Audit websites

Audits each domain and returns one row with the checks you turned on.

**Method:** `POST`

**Endpoint:** `/m/website-intelligence`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| domains | body | Websites to audit, as bare domains or full URLs | array of strings | Yes | - | - |
| includeCompanyInfo | body | Add the page title, meta description, generator tag and the company's own social profile links (LinkedIn, X/Twitter, Facebook, Instagram, YouTube, TikTok, GitHub) found on the homepage. | boolean | No | - | - |
| includeWhois | body | Add registrar, creation and expiry dates, domain age, days to expiry, status, nameservers and DNSSEC from the official RDAP service. No personal registrant data is output. | boolean | No | - | - |
| includeTls | body | Add the TLS certificate issuer, validity dates and days left until expiry. | boolean | No | - | - |
| includeRedirects | body | Follow the http:// address of the domain and record the redirect chain and the final URL. | boolean | No | - | - |
| includeSitemap | body | Read robots.txt and sitemap.xml and count the URLs listed (sitemap indexes are sampled and extrapolated). A light check, not a crawl. | boolean | No | - | - |
| includeLighthouse | body | Run a real Google Lighthouse audit (headless Chrome) per site and add performance, accessibility, best-practices and SEO scores plus Core Web Vitals. Takes 20-60 seconds per site and needs at least 2 GB of memory, so it is off by default. | boolean | No | - | - |
| lighthouseStrategy | body | Only used when Lighthouse is on: audit as a mobile phone (Lighthouse default throttling) or as a desktop. | string | No | - | - |
| includeScreenshot | body | Take a PNG screenshot of the homepage (1366x768 viewport) with headless Chromium and add a download link to each row. Needs at least 2 GB of memory, so it is off by default. | boolean | No | - | - |
| minConfidence | body | Only report technologies detected with at least this confidence (0-100). 50 hides weak single-signal guesses; use 100 for the strictest list. | integer | No | - | - |
| includeUnchanged | body | Only used with a Monitor ID. Off = unchanged domains are skipped (and not charged). On = every domain is output, with an empty changes[] when nothing changed. | boolean | No | - | - |

**Example Request:**

```bash
curl -X POST 'https://prod.api.market/api/v1/martindata/websiteintelligence-api/m/website-intelligence' \
  -H 'x-api-market-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{
  "domains": [
    "stripe.com",
    "wordpress.org"
  ],
  "includeCompanyInfo": true,
  "includeWhois": true,
  "includeTls": true,
  "includeRedirects": true,
  "includeSitemap": true,
  "includeLighthouse": false,
  "minConfidence": 50
}'
```

**Example Response (200 OK):**

```json
{
  "count": 2,
  "items": [
    {
      "added": null,
      "analytics": [],
      "categories": [
        "Blogs",
        "CMS"
      ],
      "cdn": null,
      "changes": null,
      "checkedAt": "2026-11-06T05:53:22Z",
      "cms": "WordPress",
      "description": "Open source software which you can use to easily create a beautiful website, blog, or app.",
      "dns": {
        "a": [
          "66.6.42.252"
        ],
        "aaaa": [
          "2620:109:b00a::4206:2afc"
        ],
        "caa": [
          "0 iodef \"mailto:caa@wordpress.org\"",
          "0 issue \"letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/53691143\""
        ],
        "dmarc": [
          "v=DMARC1; p=reject; rua=mailto:dmarc-reports@automattic.com;"
        ],
        "mx": [
          "10 smtp1-dca.wordpress.org.",
          "10 smtp2-dca.wordpress.org."
        ],
        "ns": [
          "ns1.wordpress.org.",
          "ns2.wordpress.org."
        ],
        "spf": [
          "v=spf1 ip4:66.6.42.0/24 ip4:66.155.40.0/24 include:helpscoutemail.com -all"
        ],
        "spfSenders": [
          "Help Scout"
        ]
      },
      "domain": "wordpress.org",
      "ecommerce": null,
      "emailProvider": null,
      "error": null,
      "finalUrl": "https://wordpress.org/",
      "generator": "WordPress 7.2-beta4-65283",
      "isNew": null,
      "lighthouse": null,
      "redirect": {
        "chain": [
          {
            "status": 301,
            "url": "http://wordpress.org/"
          },
          {
            "status": 200,
            "url": "https://wordpress.org/"
          }
        ],
        "finalStatus": 200,
        "finalUrl": "https://wordpress.org/"
      },
      "removed": null,
      "screenshot": null,
      "sitemap": {
        "childSitemaps": 3,
        "isIndex": true,
        "source": "robots.txt",
        "url": "https://wordpress.org/sitemap.xml",
        "urlCount": 843,
        "urlCountEstimated": false
      },
      "socialLinks": {
        "facebook": "https://www.facebook.com/WordPress",
        "instagram": "https://www.instagram.com/wordpress",
        "linkedin": "https://www.linkedin.com/company/wordpress",
        "tiktok": "https://www.tiktok.com/@wordpress",
        "twitter": "https://www.x.com/WordPress"
      },
      "statusCode": 200,
      "technologies": [
        {
          "categories": [
            "Programming languages"
          ],
          "confidence": 100,
          "name": "C",
          "version": null,
          "website": "http://www.open-std.org/jtc1/sc22/wg14/"
        },
        {
          "categories": [
            "Tag managers"
          ],
          "confidence": 100,
          "name": "Google Tag Manager",
          "version": null,
          "website": "http://www.google.com/tagmanager"
        }
      ],
      "technologyNames": [
        "C",
        "Google Tag Manager"
      ],
      "title": "Blog Tool, Publishing Platform, and CMS | WordPress.org",
      "tls": {
        "daysLeft": 46,
        "issuer": "Let's Encrypt",
        "notAfter": "2026-12-22T19:43:57Z",
        "notBefore": "2026-09-23T19:43:58Z",
        "san": [
          "*.wordpress.org",
          "wordpress.org"
        ],
        "tlsVersion": "TLSv1.3",
        "valid": true
      },
      "warnings": [],
      "whois": {
        "createdDate": "2003-03-28T01:07:35.665Z",
        "daysToExpiry": 3063,
        "dnssec": false,
        "domainAgeDays": 8624,
        "expiryDate": "2035-03-28T01:07:35.665Z",
        "nameservers": [
          "ns1.wordpress.org",
          "ns2.wordpress.org"
        ],
        "registrar": "MarkMonitor Inc.",
        "registrarIanaId": "292",
        "status": [
          "client delete prohibited",
          "client transfer prohibited"
        ],
        "updatedDate": "2026-08-12T03:29:29.463Z"
      }
    },
    {
      "added": null,
      "analytics": [],
      "categories": [
        "CDN",
        "Email"
      ],
      "cdn": "Amazon S3",
      "changes": null,
      "checkedAt": "2026-11-06T05:53:24Z",
      "cms": null,
      "description": "Stripe is a financial services platform that helps all types of businesses accept payments, build flexible billing models, and manage money movement.",
      "dns": {
        "a": [
          "198.137.150.111",
          "198.202.176.111"
        ],
        "aaaa": [],
        "caa": [
          "0 iodef \"mailto:caa-violations@stripe.com\"",
          "0 issue \"amazon.com\""
        ],
        "dmarc": [
          "v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;"
        ],
        "mx": [
          "10 aspmx.l.google.com.",
          "20 alt1.aspmx.l.google.com."
        ],
        "ns": [
          "ns-1087.awsdns-07.org.",
          "ns-1882.awsdns-43.co.uk."
        ],
        "spf": [],
        "spfSenders": []
      },
      "domain": "stripe.com",
      "ecommerce": null,
      "emailProvider": "Google Workspace",
      "error": null,
      "finalUrl": "https://stripe.com/",
      "generator": null,
      "isNew": null,
      "lighthouse": null,
      "redirect": {
        "chain": [
          {
            "status": 301,
            "url": "http://stripe.com/"
          },
          {
            "status": 200,
            "url": "https://stripe.com/"
          }
        ],
        "finalStatus": 200,
        "finalUrl": "https://stripe.com/"
      },
      "removed": null,
      "screenshot": null,
      "sitemap": {
        "childSitemaps": 9,
        "isIndex": true,
        "source": "robots.txt",
        "url": "https://stripe.com/sitemap/sitemap.xml",
        "urlCount": 3718,
        "urlCountEstimated": true
      },
      "socialLinks": {
        "github": "https://github.com/stripe"
      },
      "statusCode": 200,
      "technologies": [
        {
          "categories": [
            "CDN"
          ],
          "confidence": 100,
          "name": "Amazon S3",
          "version": null,
          "website": "http://aws.amazon.com/s3/"
        },
        {
          "categories": [
            "PaaS"
          ],
          "confidence": 100,
          "name": "Amazon Web Services",
          "version": null,
          "website": "https://aws.amazon.com/"
        }
      ],
      "technologyNames": [
        "Amazon S3",
        "Amazon Web Services"
      ],
      "title": "Stripe | Financial Infrastructure to Grow Your Revenue",
      "tls": {
        "daysLeft": 184,
        "issuer": "DigiCert, Inc.",
        "notAfter": "2027-05-09T23:59:59Z",
        "notBefore": "2026-10-23T00:00:00Z",
        "san": [
          "stripe.com",
          "www.stripe.com"
        ],
        "tlsVersion": "TLSv1.3",
        "valid": true
      },
      "warnings": [],
      "whois": {
        "createdDate": "1995-09-12T04:00:00Z",
        "daysToExpiry": 308,
        "dnssec": false,
        "domainAgeDays": 11378,
        "expiryDate": "2027-09-11T04:00:00Z",
        "nameservers": [
          "ns-1087.awsdns-07.org",
          "ns-1882.awsdns-43.co.uk"
        ],
        "registrar": "SafeNames Ltd.",
        "registrarIanaId": "447",
        "status": [
          "client delete prohibited",
          "client transfer prohibited"
        ],
        "updatedDate": "2025-10-01T01:39:51Z"
      }
    }
  ]
}
```

## Status Codes

| Code | Status | Description |
|---|---|---|
| 200 | OK | The request succeeded and the response body holds the result. |
| 400 | Bad Request | A required parameter is missing or a value is invalid. Check the parameter table for the endpoint. |
| 401 | Unauthorized | The `x-api-market-key` header is missing or the key is not valid. |
| 403 | Forbidden | Your key is valid but your subscription does not allow this request, for example an endpoint outside your plan. |
| 404 | Not Found | The path does not exist, or the resource you asked for was not found. |
| 429 | Too Many Requests | You sent more than 10 requests per second. Slow down and retry, honouring the `Retry-After` header. |
| 500 | Internal Server Error | Something went wrong while processing the request. Retry after a short wait. |
| 503 | Service Unavailable | The service or its upstream data source is temporarily unavailable. Retry with backoff. |

## Rate Limits

Every plan allows up to 10 requests per second. Subscription plans also have a monthly call quota shown on the pricing page. Sending more than 10 requests per second returns `429 Too Many Requests`. Throttle your client to stay under 10 requests per second, back off and retry when you get a 429, and honour the `Retry-After` header when it is present.

## FAQ

*   **How long does a call take?**

    About 10 to 30 seconds for a couple of domains with the default checks. Lighthouse and screenshots add more time, so set your client timeout to at least 150 seconds.

*   **Does WHOIS include personal data?**

    No. It returns registrar, dates, status, nameservers and DNSSEC from RDAP, not registrant contact details.

*   **Are repeated requests cached?**

    Yes. An identical request made within 6 hours returns the cached result straight away.

## Contact Us

If you have any questions or need assistance, you can reach out to us through the embedded chat on the bottom right corner of the page or send an email to hello@magicapi.com.


Audit websites in bulk: tech stack, DNS and DMARC, WHOIS dates, TLS expiry, redirects and sitemap size in one JSON row per domain.

Website Audit API: Tech Stack, WHOIS, DNS and TLS