# domainrdapportfolioaudit report: brand-demo.example

> Demo report on a fictional sample site.

**Score:** 33/100 · Scanned 2026-10-27T03:14:15.648Z

4 of 6 checks need attention (2 high priority).

- [x] **Registry record found for every domain** (medium): 2/2 found via RDAP.
- [ ] **No domain expires within 60 days** (high): brand-demo.io: 20 days
- [ ] **Transfer lock (clientTransferProhibited) on** (high): Unlocked: brand-demo.io
- [ ] **DNSSEC signed** (low): 0/2 signed.
- [ ] **CAA records limit certificate issuers** (low): 1/2 have CAA.
- [x] **No TLS certificate expires within 21 days** (medium): 1 certificates checked.

---
Read-only: one RDAP lookup per domain at the registry listed by IANA, public DNS lookups and one TLS handshake. Registrant contact data is not requested or stored.