View domain details
Select a domain name from the Domains page to open its detail view. The detail view shows the domain's current posture score, findings, applied policies, evaluation history, and configuration settings across 5 tabs: Overview, Findings, Policies, History, and Settings.
The page header displays the domain name, status badge, portfolio badge, registration date, and the date and time of the most recent scan.
Select Run scan to trigger an immediate scan outside the configured scan schedule. Run scan is unavailable when a domain is paused.
Domain actions menu
Select the ⋮ icon to access the following actions:
Edit - View the domain overview and update policies and settings.
Enable: Resume monitoring for a paused domain. The domain returns to Active status and scanning resumes on the next scheduled interval.
Move: Reassign the domain to a different portfolio. Moving the domain changes the policy set and scan configuration applied to it. See Move a domain to a different portfolio.
Archive: Remove the domain and its posture scores from the portfolio, stop scanning the domain, and enable deletion. See Archive a domain.
The Overview tab is displayed by default. It includes the following panels:
Overall Posture Score: A gauge showing the domain's numeric posture score and its overall health rating.
Findings by Severity: Active findings broken down by severity (High Risk, Medium Risk, and Low Risk).
Principles: Pass and fail counts across each configured principle.
Whois Information: Registration data including registrar, expiry date, days to expiry, RDAP statuses, creation date, last updated date, and nameserver count.
Certificate Information: TLS certificate data including issuer, type, chain depth, signature, expiry date, SANs, days remaining, and key details. A Warning badge indicates a certificate issue requiring attention.
Posture Score History: The domain's current score, compliance status (Compliant or Non-compliant), trend direction, and a time-series chart of score history.
Global Reachability: Probe-based reachability data showing the number of probes responding and unreachable, average latency, and fastest and slowest probe locations. Includes a world map and a location, country, and region breakdown table. Select Google or Cloudflare to switch resolver views.
The Findings tab lists policy violations affecting this domain's contribution to the overall posture score. When violations are present, the tab header shows a badge with the number of findings.
Summary cards at the top of the tab show:
Overall Posture Score: The domain's current posture score out of 100.
Findings: Total active findings for this domain.
High Risk: Count of high-risk findings.
Medium Risk: Count of medium-risk findings.
Low Risk: Count of low-risk findings.
The findings table includes the following details:
Finding: The name of the policy violation. Select to view details.
Record name: The DNS record associated with the finding, if applicable.
Policy: The policy that surfaced the finding.
Principle: The principle the policy belongs to.
Framework: The compliance frameworks the policy maps to.
Severity: The severity of the finding (High, Medium, or Low). See Investigate and remediate findings for severity definitions.
Last observed: The date and time the finding was last detected.
Select View Evidence to open the evidence panel for the domain's findings. See Interpret finding evidence.
When no findings are present, the tab displays a confirmation and the message "No findings detected - your posture looks healthy."
If Atlassian Jira is connected as an integration, select the checkbox next to 1 or more findings and select Create Ticket to create a linked Jira ticket. Each row also provides View details and View evidence options from the row menu.
The Policies tab lists the policies applied to this domain and their current compliance status.
The table includes the following columns:
Enabled: Whether the policy is currently active for this domain.
Policy: The name of the policy being evaluated.
Principle: The principle the policy belongs to.
DNS Integration: Whether the policy requires a DNS provider integration. A blue locked icon indicates an integration is required. A grey open icon indicates the check runs as an external scan.
Status: The compliance result (Compliant or Violated).
Violations: The number of active violations for the policy.
Confidence: The confidence level of the policy result (High or Low).
Last Evaluated: The date and time the policy was last evaluated.
The History tab shows the domain's posture score history. Use it to correlate score changes with DNS events, policy changes, and remediations.
To find the cause of a score drop, locate the evaluation where the score changed and review its evidence. To confirm a remediation, check that the score increased after the next evaluation.
Summary cards at the top of the tab show:
Latest score: The domain's posture score out of 100 from the most recent evaluation.
Compliance: Whether the domain meets its assigned policies (Compliant or Not compliant).
Score change: The change in posture score since the previous evaluation. A dash (—) indicates no change.
Changes detected: The number of new findings detected in the most recent evaluation.
Last evaluation: The date and time of the most recent evaluation, in UTC.
The Score Timeline chart plots the domain's posture score across evaluations. Shaded bands show the score range for each health status: Compliant, Warning, High, and Critical.
The Evaluation history table lists each evaluation of the domain, with the most recent first. The table includes the following details:
Evaluated at: The date and time of the evaluation, in UTC.
Score: The domain's posture score from the evaluation.
Score change: The change in posture score from the previous evaluation, in points. A dash (—) indicates no change.
Findings: The number of findings detected in the evaluation.
Evidence: Select View to open the raw signal data (JSON) collected during the evaluation.
The Settings tab displays the domain's current configuration and lets you change its portfolio assignment or scan schedule.
Portfolio: The domain's current portfolio assignment. To move the domain, select a portfolio from the dropdown and select Move. Moving the domain changes the policy set and scan configuration applied to it. See Move a domain to a different portfolio.
Scan schedule: How often DigiCert® Posture Management evaluates this domain. When the domain belongs to a portfolio, it inherits the portfolio's scan schedule, and makes the schedule options read-only. To set a domain-level schedule, move the domain to a different portfolio first.
Available scan modes:
Schedule scan: Runs at the interval selected in Run scan.
Event-backed schedule: Runs on the selected interval and triggers immediately when DigiCert® Posture Management detects a DNS change. This is the recommended mode.
Run scan on DNS change only: Triggers only when DigiCert® Posture Management detects a DNS change, with no scheduled scan interval.
Select Save Schedule to apply changes.