DNS SECURITY CHECKER
Check DNSSEC, CAA records, nameservers, and email authentication for any domain. Instant results, no signup.
FREQUENTLY ASKED QUESTIONS
WHAT IS DNSSEC?
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records. It prevents attackers from redirecting your visitors to malicious sites by verifying that DNS responses are authentic and unmodified.
WHAT ARE CAA RECORDS?
CAA (Certificate Authority Authorization) records specify which Certificate Authorities are allowed to issue SSL/TLS certificates for your domain. Without CAA records, any CA can issue certificates, increasing the risk of unauthorized certificate issuance.
WHY DO NAMESERVERS MATTER?
Nameservers translate your domain name to IP addresses. Having at least two nameservers from different providers ensures DNS resolution continues if one fails. Single-provider setups create a single point of failure.
WHAT DNS SECURITY SHOULD I HAVE?
At minimum, enable DNSSEC, set up CAA records restricting certificate issuance, configure SPF and DMARC for email authentication, and use at least two nameservers. IPv6 support is recommended for modern connectivity.
IS THIS TOOL FREE?
Yes. This DNS security checker is completely free with no signup required. For a comprehensive security audit covering 700+ checks across SSL, headers, vulnerabilities, and more, try our full scanner.
Part of UNPWNED FREE TOOLS - open security utilities for developers.