---
title: "NIS2 quickscan"
method: GET
path: "/scan/nis2"
tags: ["scan"]
---

# NIS2 quickscan

`GET /scan/nis2`

## Request

- Base URL: `https://intodns.ai/api`
- URL: `https://intodns.ai/api/scan/nis2`
- Auth: none required

Compute a NIS2 readiness indicator from the DNS and email layer. Maps the quickscan evidence onto NIS2 Article 21.2 measures (a–j) and returns a weighted 0-100 score, per-measure status, evidence rows, critical gaps, and fix suggestions. Evidence that is not applicable for a given domain (e.g. DNSSEC on a TLD that does not support it) is excluded from the measure's score and reduces the measure's effective weight in the total. The result is a readiness indicator only — full NIS2 compliance also requires audit of web applications, supply chain, organisational processes, and training.

## Query parameters

- `domain` string, required
- `lang` 'en' | 'nl'

## Response `200`

NIS2 scorecard returned successfully

- object
  - `domain` string
  - `scannedAt` string, date-time
  - `total` integer
  - `status` 'compliant' | 'partial' | 'non-compliant' | 'unscannable'
  - `measures` object[]
    - `id` 'a' | 'b' | 'c' | 'd' | 'e' | 'f' | 'g' | 'h' | 'i' | 'j'
    - `label` string
    - `description` string
    - `weight` integer
    - `score` integer
    - `status` 'pass' | 'warning' | 'fail' | 'not-applicable'
    - `evidence` object[]
      - `checkId` string
      - `label` string
      - `result` 'pass' | 'fail' | 'missing' | 'not-applicable'
      - `detail` string
    - `fixes` string[]
  - `criticalGaps` string[]
  - `caveat` string

## Other responses

- `400`: Invalid domain name

---

[API](https://skmtc.dev/intodns/apis/intodns-ai-api.md) · [All operations](https://skmtc.dev/intodns/apis/intodns-ai-api/llms.txt) · [OpenAPI document](https://skmtc.dev/intodns/apis/intodns-ai-api/revisions/c6c196b2fb4c?raw)