DNS Security Checker

Verify DNS records, SPF, DMARC, DKIM, DNSSEC — no signup required

We automatically add https:// — just type your domain. We'll run the relevant scanners and email you the full report.

What We Check

A, AAAA, MX, NS, TXT, SOA records — full DNS enumeration.

Verifies Sender Policy Framework is configured to prevent email spoofing.

Checks DMARC policy (none/quarantine/reject) and reporting configuration.

Probes common DKIM selectors for email signing keys.

Validates the DNSSEC chain of trust (DNSKEY + DS records).

Checks Certification Authority Authorization records.

Verifies Mail Transfer Agent Strict Transport Security policy.

Checks TLS Reporting configuration for inbound email.

This checker is just part of our 27-scanner security assessment. Run a full scan for a complete report.