Back to blog

08 Nov 2026

Domain Portfolio Audit: 20-Point Checklist (Free Template)

A domain portfolio audit is a review of every domain your company owns: who owns it, where it is registered, when it expires, how it is secured and whether you still need it. Most companies can finish a first audit in one or two days.

Use the 20-point checklist below, record results in a simple sheet and you will have a clear keep, consolidate or drop decision for every domain.

Domain portfolio audit checklist and inventory template
Before You Start

What You Need for a Domain Audit

  • Access to every registrar account you know about
  • Finance records of domain payments for the last 3 years
  • Access to DNS zones in your cloud and hosting accounts
  • A list of brand, product and campaign names
  • A shared sheet with the columns in the template below
Find Everything

Part 1: Discovery (Points 1 to 5)

  1. List domains in every known registrar account
  2. Search finance records for registrar payments on any card or account
  3. Export DNS zones from cloud providers and hosting accounts
  4. Run RDAP or WHOIS searches on your company name and brand terms
  5. Ask agencies and past vendors for domains they registered for you

Surprised by what you find? Read shadow IT domains.

Who Controls It

Part 2: Ownership (Points 6 to 9)

  1. Registrant is the company, not a person or agency
  2. Admin and tech contacts use role emails
  3. Each domain has a named business owner
  4. Registrar logins are personal accounts with MFA
Keep It Alive

Part 3: Lifecycle (Points 10 to 13)

  1. Auto-renew is on
  2. Core domains are renewed for 3 years or more
  3. Renewal alerts go to at least two people
  4. Payment method on file is valid and owned by the company
Keep It Safe

Part 4: Security (Points 14 to 17)

  1. Transfer lock is on
  2. Registry lock is on for critical domains
  3. DNSSEC is on where supported
  4. SPF, DKIM and DMARC are set, including on unused domains. See our DMARC setup guide
Is It Needed

Part 5: Purpose and Cost (Points 18 to 20)

  1. Each domain is labelled: live site, redirect, protection or unused
  2. Unused domains are reviewed for drop or redirect
  3. Yearly cost per domain is recorded
Free Template

Domain Inventory Template Columns

Column Example
Domain examplebrand.in
Purpose Main website
Business owner Marketing Head
Registrar Registrar name
Registrant Example Pvt Ltd
Expiry date 2028-03-14
Auto-renew Yes
Locks Transfer: Yes, Registry: Yes
DNS host DNS provider
Email records SPF, DKIM, DMARC reject
Yearly cost ₹ amount
Decision Keep / Redirect / Protect / Drop
Make Decisions

Keep, Consolidate or Drop?

Label Rule of thumb
Keep and use Live site, email or app domain
Keep and redirect Brand variants, old brands with backlinks
Keep for protection High-risk typos and key country versions
Drop Old campaign or product names no one would confuse with you

Then consolidate keepers into one account with planned domain transfer services.

Real-World Examples

What Audits Usually Find

Healthcare Group Finds 36 Unknown Domains

Client: Hospital and diagnostics group, Hyderabad

Challenge: IT tracked 25 domains. Agencies had registered many more over the years.

What we did: Full audit using this checklist, ownership recovery, consolidation and keep or drop labels.

Results:

  • 61 domains found, 23 dropped, 38 kept
  • One registrar instead of nine
  • Quarterly audit now part of the risk calendar

IT Firm Scores 8 of 20, Then 18 of 20

Client: IT services company, Hyderabad

Challenge: Shared registrar logins, no DMARC and several domains on a former director's card.

What we did: Ownership fixed, MFA and roles, DMARC rollout, auto-renew with company payment, registry lock on main domain.

Results:

  • Checklist score improved from 8 to 18 in two months
  • No shared logins remain
  • Domain controls documented for client security reviews
Wrap-Up

Audit Once, Then Make It a Habit

Your first domain audit is the hardest. After that, a quarterly review takes an hour. Use the checklist, keep the sheet updated and follow the domain governance basics.

Prefer us to run it? Our domain portfolio management services include a full audit.

Explore More

More Services

Explore Related Blogs



Get the latest news and
blog updates