Verification operations

How to Build a Business Verification Workflow

A verification workflow is the repeatable sequence a business uses to confirm a domain, email server, IP, or partner is legitimate and operationally healthy. This guide walks through designing one your team can run on autopilot.

Quick summary

  • Name workflows after the business event, not the tool.
  • Sequence checks from cheapest to most expensive.
  • Save workflows so on-call handoffs are trivial.
  • Re-run on a schedule once the workflow stabilises.

The five layers of a business verification workflow

  1. Identity — WHOIS / RDAP confirms ownership and age.
  2. Resolution — DNS records show the domain points where you expect.
  3. Encryption — SSL certificate is valid, current, and matches the host.
  4. Reputation — IP and domain are not on operational blacklists.
  5. Behaviour — HTTP headers and uptime confirm the service is actually live.

Designing the workflow

Start from a real business event your team handles — onboarding a vendor, approving a new sending domain, or qualifying a partner integration. Write the checks down in the order you'd run them, then save that sequence as a named workflow you can resume in one click.

Troubleshooting workflow

Run through these steps in order. Each step links to the right diagnostic tool.

  1. 1

    Confirm ownership

    WHOIS / RDAP shows registrant, registrar, and creation date.

    Open WHOIS
  2. 2

    Validate DNS

    A, MX, SPF, DKIM, and DMARC records should match your expectations.

    Open DNS Lookup
  3. 3

    Verify the certificate

    TLS validity, expiry, and hostname coverage.

    Open SSL Checker
  4. 4

    Check reputation

    Sweep blacklists and reputation feeds for both IP and domain.

    Open Blacklist Check
  5. 5

    Save the workflow

    From the dashboard, save the sequence so the next incident or onboarding resumes in one click.

    Open Operational dashboard

Frequently asked questions

What is a business verification workflow?

A named, repeatable sequence of checks — typically domain, DNS, SSL, blacklist, and reputation — that confirms an external party or your own infrastructure is trustworthy.

How often should a verification workflow run?

Onboarding events run once; ongoing trust monitoring runs on a daily or weekly schedule. Critical assets like sending IPs and payment domains belong on the shortest interval.

Who owns the verification workflow?

Operations or IT typically owns the workflow; compliance, security, and deliverability teams consume the output. Saved workflows make ownership transferable.

What's the difference between verification and monitoring?

Verification is a point-in-time confirmation. Monitoring is verification on a schedule with alerts on state change. Mature teams pair the two.

Run the rest of the checks

DNS, SSL, headers, blacklists and WHOIS all run free in the browser — no account, nothing stored.

Browse the tools