Free DNS Security Checker & DNSSEC Validator

Test DNS security online. Validate DNSSEC configuration, check CAA records, analyze nameserver security, and identify DNS misconfigurations. Protect your domain from DNS spoofing, hijacking, and unauthorized certificate issuance.

https://

No credit card required • Instant results

DNSSEC Validation

Verify DNSSEC (DNS Security Extensions) is properly configured to protect against DNS spoofing attacks

CAA Records

Check Certificate Authority Authorization records to prevent unauthorized SSL certificate issuance

Nameserver Analysis

Analyze nameserver configuration, DNS records, and identify potential security vulnerabilities

Why DNS Security Matters

DNSSEC Benefits

  • Protects against DNS cache poisoning
  • Prevents DNS spoofing and hijacking
  • Ensures DNS response authenticity
  • Cryptographic validation of DNS data

CAA Records Protection

  • Controls which CAs can issue certificates
  • Prevents unauthorized SSL certificate issuance
  • Adds layer of protection against phishing
  • Required by many certificate authorities

DNS Security Best Practices

DNS is a critical component of internet infrastructure. Without proper security measures, attackers can redirect your traffic, intercept communications, or impersonate your domain.

  • Enable DNSSEC on your domain to prevent DNS spoofing
  • Configure CAA records to control SSL certificate issuance
  • Use reputable DNS hosting providers with DDoS protection
  • Monitor DNS changes and implement alerts for modifications
  • Regularly audit DNS configuration for misconfigurations

DNS security questions

What does the DNS security checker test?

It checks DNSSEC signing and validation, CAA records that control which certificate authorities may issue certificates for your domain, and your nameserver setup.

What is DNSSEC?

DNSSEC signs your DNS records so resolvers can verify they have not been forged. It protects visitors from DNS spoofing that would send them to an attacker's server.

What is a CAA record?

A DNS record listing which certificate authorities are allowed to issue certificates for your domain. Without one, any public CA may issue a certificate, which makes a mistaken or fraudulent issuance easier.

Do I need more than one nameserver?

Yes. At least two nameservers, ideally on separate networks, keep your domain resolving if one provider has an outage.

Is the DNS security checker free?

Yes, with no registration. It only reads public DNS records.

This is one check. A full scan runs them all.

Free

The DNS Security Check covers one area. A full scan runs every check on the same site in one go, so nothing it does not reach goes unnoticed.

Covered by this check

  • DNSSEC validation
  • CAA record analysis
  • Nameserver security audit
  • DNS record verification
  • DNS misconfiguration detection

Added by a full scan

  • SSL/TLS certificate validation
  • Security headers analysis
  • WordPress vulnerability scanning
  • Malware & script detection
  • Domain reputation analysis
  • Certificate transparency logs
  • Port scanning
  • And 6+ more security checks
https://

Want it checked automatically? A free account rescans one site every week and emails you new findings. No credit card.

Start free monitoring

More DNS and email security tools

DNS Lookup

Look up A, AAAA, MX, TXT, NS and other DNS records for any domain.

MX Lookup

Look up the mail servers for any domain.

SPF Checker

Check an existing SPF record for errors and lookup limits.

DMARC Checker

Validate an existing DMARC record and see how it is configured.

Subdomain Finder

Discover subdomains for any domain using Certificate Transparency logs.