Health Checks
5-point domain health assessment with letter grades
Domain Pilot's health check runs a comprehensive 5-point assessment of your domain, scoring it on critical factors that affect reliability, security, and performance.
Running a Health Check
- Navigate to your domain's detail page
- Open the Health tab
- Click Run Health Check
The check runs in the background, testing 5 different aspects of your domain. A progress indicator shows which check is currently running and the overall completion percentage.
Results are cached for 5 minutes — if you've run a check recently, the cached result is displayed with a timestamp.
Overall Score and Grade
After all 5 checks complete, you receive a numeric score (0–100) displayed in a circular indicator, and a letter grade:
- A (90–100) — Excellent. Well-configured, no issues
- B (70–89) — Good. Minor improvements possible (e.g., missing SPF/DKIM or a security header)
- C (50–69) — Needs Attention. Several areas need improvement
- D (0–49) — Critical. Significant problems, address immediately
The 5 Health Checks
Each check has its own score, status, and detailed findings. Individual checks can have these statuses: Pass, Warning, Critical, Error, or Expired.
1. Domain Expiration
Checks your domain registration status.
What it reports: Expiration date, days until expiry, registrar, creation/update dates, nameservers, domain status codes, and Whois contacts.
What to watch for:
- Domains expiring within 30 days should be renewed immediately
- Ensure auto-renewal is enabled to prevent accidental expiration
2. SSL Certificate
Validates your domain's SSL/TLS certificate.
What it reports: Certificate issuer and validity status.
What to watch for:
- Invalid certificates cause browser security warnings for visitors
- Certificates nearing expiration should be renewed
- Self-signed certificates will be flagged
3. Website Availability
Tests whether your website is accessible.
What it reports: Online status, response time, HTTP status code, HTTPS status, HTTPS redirect behavior, and redirect details.
What to watch for:
- Sites should redirect HTTP to HTTPS
- Response times over 1 second may indicate performance issues
- Non-200 status codes suggest configuration problems
4. DNS Configuration
Checks your DNS setup for essential records.
What it reports: A record, MX record, SPF, and DKIM status.
What to watch for:
- Missing A records mean your domain doesn't resolve
- Missing MX records mean you can't receive email
- Missing SPF and DKIM increase the chance of email being marked as spam
5. Security Headers
Evaluates the HTTP security headers your server sends.
What it reports: HSTS status, Content Security Policy status, and specific recommendations.
What to watch for:
- HSTS ensures browsers always use HTTPS
- CSP helps prevent cross-site scripting (XSS) attacks
- Follow the recommendations to improve your security posture
Viewing Check Details
Each of the 5 checks can be expanded to show its detailed findings. Click on a check to see the full breakdown including all reported fields and any recommendations.