DNS Security Audit
Scan your domain against 13 security checks based on the NIST SP 800-81r3 Secure DNS Deployment Guide. Get a letter grade and actionable recommendations.
Checks run in parallel and stream results in real time.
Email Authentication
SPF policyDMARC enforcementDKIM signing
DNSSEC
DNSSEC validationAlgorithm strength (Ed25519, ECDSA, RSA)Signature expiry monitoring
DNS Infrastructure
Lame delegation detectionSOA serial consistencyNameserver network diversityTTL hygiene
Domain Integrity
Dangling CNAME / subdomain takeoverCAA certificate restrictionsInformation leakage (HINFO, LOC)Encrypted DNS (DoT/DoH) support