Passport control · live · free · no account

Does this domain
get through?

Type any website, AI product or agent's domain. In a few seconds you get its passport: thirteen live security checks, a score out of 100, and the register's stamp.

Try
Lunara Society · Passport
Holder
—
Passport no.
—
Scanned
—
DNS proof of control
—
Visa · the public register

Reading the register…

Border checks · 13
0/ 100
·
Public signals only. The visa is decided by a person.

How to raise this score

Each line is a change your web or DNS host can make, usually in minutes.

    Get the stamp

    Points come from public signals. The stamp comes from a named reviewer checking who runs the domain, and every AI system that asks the register gets the same answer.

    Apply for Shield 
    
        
    That call is the whole API: any AI system can run this scan before it trusts or pays a site.
    
      
    
      
    
        
    The free badge
    
        
    
        
    
        
        
      
    
      
    
        
    Watch this passport
    
        
    We rescan every week. Leave an email and we tell you the day something here gets worse: a certificate rule removed, email protection switched off, a grade lost.
    
        
    
          
          
        
    
        
    
      
    
    
    
    
    
    See how 127 AI companies score in the weekly league table →
    
  
    

  
    
    
    What the passport reads
    
    
    Three questions at the border
    
    
    
      
    
        
        
    Is the connection safe?
    
        
    HTTPS, HSTS, a content security policy and the headers that stop clickjacking and content sniffing.
    
      
    
      
    
        
        
    Can its name be forged?
    
        
    DNSSEC, SPF and DMARC decide whether someone else can send email or answer DNS as this domain. CAA limits who issues its certificates.
    
      
    
      
    
        
        
    Does it speak to machines?
    
        
    An llms.txt for AI systems, a declared policy for AI crawlers, and a security.txt so a researcher who finds a hole knows whom to tell.
    
      
    
    
    
    
    The score never decides the visa. A site can score 100 and still be not_registered: the register only stamps a domain after a named reviewer has checked who runs it. That separation is the point.