tZERO · Domain Security

Tzero Domain Security

Domain security

Domain security posture for tZERO, probed live across 5 host(s) and 2 registrable domain(s). 5 host(s) serve HTTPS (up to TLSv1.3); 2 advertise HSTS. Email/DNS controls: DNSSEC present, SPF present, DMARC present (p=reject).

CompanyDigital SecuritiesTokenizationCapital MarketsTradingAlternative Trading SystemTransfer AgentCustodyBlockchainFinancial ServicesSecuritiesMarket DataFIX Protocol

Transport & Host Security

www.tzero.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 2 07:28:10 2026 GMT
apidocs.tzero.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Nov 9 04:36:49 2026 GMT
gateway-web-api.tzero.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 5 23:43:17 2026 GMT
api.t0direct.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 20 20:50:59 2026 GMT
platform.tzero.com
HTTPS: yes · TLS: TLSv1.3 · HSTS: no · cert expires: Oct 30 00:25:27 2026 GMT

Domain (DNS/Email) Security

tzero.com
DNSSEC: yes · SPF: yes · DMARC: yes (p=reject) · CAA: none
t0direct.com
DNSSEC: no · SPF: no · DMARC: no · CAA: none

Source

Domain Security

Raw ↑ 
generated: '2026-09-01'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: www.tzero.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov  2 07:28:10 2026 GMT
  hsts: true
  hsts_max_age: 63072000
- host: apidocs.tzero.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov  9 04:36:49 2026 GMT
  hsts: false
- host: gateway-web-api.tzero.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct  5 23:43:17 2026 GMT
  hsts: null
- host: api.t0direct.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 20 20:50:59 2026 GMT
  hsts: true
  hsts_max_age: 31536000
  hsts_include_subdomains: true
  method: probed-by-hand
- host: platform.tzero.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Oct 30 00:25:27 2026 GMT
  method: probed-by-hand
domains:
- domain: tzero.com
  dnssec: true
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject
- domain: t0direct.com
  dnssec: false
  caa: []
  spf: false
  dmarc: false
  dmarc_policy: null
  method: probed-by-hand
note: The mechanical probe reads apis.yml Website/Portal/humanURL/baseURL and OpenAPI servers[]. api.t0direct.com
  and platform.tzero.com were probed by hand on the same day with the same method and appended below; t0direct.com
  is a second registrable domain tZERO operates for its institutional surface and it carries no DNSSEC, CAA, SPF
  or DMARC record.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/tzero-domain-security"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.