DNS SECURITY CHECKER
Check DNSSEC, CAA records, nameservers, and email authentication for any domain. Instant results, no signup.
FREQUENTLY ASKED QUESTIONS
WHAT IS DNSSEC?
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records. It prevents attackers from redirecting your visitors to malicious sites by verifying that DNS responses are authentic and unmodified.
WHAT ARE CAA RECORDS?
CAA records let a domain owner restrict which compliant Certificate Authorities may issue certificates. Missing CAA is a hardening gap, not proof that an unauthorized certificate was issued.
WHY DO NAMESERVERS MATTER?
Nameservers publish authoritative DNS answers. At least two authoritative nameservers improve availability; using one or several providers is an operational design choice and is not itself proof of a security weakness.
WHAT DNS SECURITY SHOULD I HAVE?
DNSSEC and CAA are recommended hardening controls. SPF and DMARC matter when the domain sends or receives email. IPv6 improves connectivity but its absence is not a security vulnerability.
IS THIS TOOL FREE?
Yes. This DNS security checker is completely free with no signup required. For a comprehensive security audit covering 700+ checks across SSL, headers, vulnerabilities, and more, try our full scanner.
Part of UNPWNED FREE TOOLS - open security utilities for developers.