Free tool · no signup

DNS Security Checker

Verify DNS records, SPF, DMARC, DKIM, DNSSEC — no signup required

Free instant check · 5 live signals · no signup required

What We Check 8 checks in this tool

DNS Records

A, AAAA, MX, NS, TXT, SOA records — full DNS enumeration.

SPF Record

Verifies Sender Policy Framework is configured to prevent email spoofing.

DMARC Record

Checks DMARC policy (none/quarantine/reject) and reporting configuration.

DKIM Record

Probes common DKIM selectors for email signing keys.

DNSSEC

Validates the DNSSEC chain of trust (DNSKEY + DS records).

CAA Records

Checks Certification Authority Authorization records.

MTA-STS

Verifies Mail Transfer Agent Strict Transport Security policy.

TLS-RPT

Checks TLS Reporting configuration for inbound email.

This tool is a small window into the full engine

The complete audit runs 272 scanners — OWASP, SQL injection, WordPress suite (WPScan), technology fingerprinting (WhatWeb), the full 13,000-template Nuclei pack, and exploit-availability intelligence from ExploitDB & Metasploit — in one professional report.

Get a complete security audit

This checker covers a fraction of our 276-scanner assessment. Run a full scan for a complete report.

Start Full Free Scan See The Deep Audit