Check Your DNS Security Configuration
Scan your DNS configuration for the weaknesses attackers exploit — missing DNSSEC, absent CAA records, exposed ports and admin panels, and misconfigured email records — and get exact fixes.
Free instant check · No signup needed · See how it works
What the DNS Security Check Covers
The DNS-layer settings that decide whether your domain can be hijacked, spoofed, or probed.
DNSSEC
Whether DNSSEC is enabled and correctly signed to stop DNS spoofing and cache-poisoning attacks.
CAA Records
Whether CAA records restrict which certificate authorities can issue certs for your domain.
Exposed Services
Open ports and exposed admin panels reachable from the internet that attackers scan for first.
Email DNS Records
SPF, DKIM and DMARC records live in DNS too — misconfiguration here lets attackers spoof your domain.
How It Works
Enter your domain
No agents, no config — just your domain name.
We run the checks
Every check runs concurrently and finishes in under 2 minutes.
Get your grade + fixes
A clear A–F grade with prioritised, step-by-step remediation.
DNS Security Check — FAQ
What is a DNS security check?
It inspects your domain's DNS configuration for security weaknesses — whether DNSSEC is enabled, whether CAA records restrict certificate issuance, and whether services like open ports or admin panels are exposed. SecurityStatus checks all of it free.
How do I check if DNSSEC is enabled?
Enter your domain and the scan checks for a valid DNSSEC chain of trust. DNSSEC cryptographically signs your DNS so attackers can't forge responses and redirect your visitors — if it's missing, the checker flags it with setup steps.
What are CAA records and do I need them?
CAA records tell certificate authorities which of them are allowed to issue certificates for your domain, preventing an attacker from obtaining a rogue cert elsewhere. They're a quick, high-value DNS addition — the check tells you if yours are set.
Can a DNS check find exposed services?
Yes — the scan also identifies open ports and exposed admin panels reachable from the internet, which are common entry points attackers probe before anything else.
Is the DNS security check free?
Yes — DNSSEC, CAA, exposed services, and email DNS records are all checked free as part of your domain scan, with a grade and remediation steps. No credit card required.
Check Your DNS Security Now
Find missing DNSSEC, CAA, and exposed services — before an attacker maps them first.
Check My DNS Free