Health Checks

5-point domain health assessment with letter grades

Domain Pilot's health check runs a comprehensive 5-point assessment of your domain, scoring it on critical factors that affect reliability, security, and performance.

Running a Health Check

  1. Navigate to your domain's detail page
  2. Open the Health tab
  3. Click Run Health Check

The check runs in the background, testing 5 different aspects of your domain. A progress indicator shows which check is currently running and the overall completion percentage.

Results are cached for 5 minutes — if you've run a check recently, the cached result is displayed with a timestamp.

Overall Score and Grade

After all 5 checks complete, you receive a numeric score (0–100) displayed in a circular indicator, and a letter grade:

  • A (90–100) — Excellent. Well-configured, no issues
  • B (70–89) — Good. Minor improvements possible (e.g., missing SPF/DKIM or a security header)
  • C (50–69) — Needs Attention. Several areas need improvement
  • D (0–49) — Critical. Significant problems, address immediately

The 5 Health Checks

Each check has its own score, status, and detailed findings. Individual checks can have these statuses: Pass, Warning, Critical, Error, or Expired.

1. Domain Expiration

Checks your domain registration status.

What it reports: Expiration date, days until expiry, registrar, creation/update dates, nameservers, domain status codes, and Whois contacts.

What to watch for:

  • Domains expiring within 30 days should be renewed immediately
  • Ensure auto-renewal is enabled to prevent accidental expiration

2. SSL Certificate

Validates your domain's SSL/TLS certificate.

What it reports: Certificate issuer and validity status.

What to watch for:

  • Invalid certificates cause browser security warnings for visitors
  • Certificates nearing expiration should be renewed
  • Self-signed certificates will be flagged

3. Website Availability

Tests whether your website is accessible.

What it reports: Online status, response time, HTTP status code, HTTPS status, HTTPS redirect behavior, and redirect details.

What to watch for:

  • Sites should redirect HTTP to HTTPS
  • Response times over 1 second may indicate performance issues
  • Non-200 status codes suggest configuration problems

4. DNS Configuration

Checks your DNS setup for essential records.

What it reports: A record, MX record, SPF, and DKIM status.

What to watch for:

  • Missing A records mean your domain doesn't resolve
  • Missing MX records mean you can't receive email
  • Missing SPF and DKIM increase the chance of email being marked as spam

5. Security Headers

Evaluates the HTTP security headers your server sends.

What it reports: HSTS status, Content Security Policy status, and specific recommendations.

What to watch for:

  • HSTS ensures browsers always use HTTPS
  • CSP helps prevent cross-site scripting (XSS) attacks
  • Follow the recommendations to improve your security posture

Viewing Check Details

Each of the 5 checks can be expanded to show its detailed findings. Click on a check to see the full breakdown including all reported fields and any recommendations.