Dashboard/Tools

DNS Tools

A free toolbox for the most common DNS operations: lookups, propagation, DNSSEC, DoH, leak testing, email auth (SPF/DMARC/DKIM), and reputation. Backed by the SecDNS control plane and authoritative network.

Records

DNS Lookup

Free DNS lookup for A, AAAA, MX, NS, TXT, CAA, SOA, CNAME, PTR, and SRV records. Live answers, response times, and a copy-friendly view.

DNS Propagation Checker

Check DNS propagation across Cloudflare, Google, Quad9, OpenDNS, AdGuard, and SecDNS resolvers in parallel.

Security

DNSSEC Validator

Verify DNSSEC chain-of-trust: AD flag from a validating resolver, DS records at the parent, and signature presence.

Privacy

DoH Endpoint Tester

Probe any RFC 8484 DNS-over-HTTPS endpoint. Reports wire-format support, JSON support, status, and round-trip time.

DNS Leak Test

Find out which DNS resolvers your network actually uses. Detects VPN leaks and ISP fallbacks via cross-resolver probes.

What's My DNS

See your current public IP and reverse PTR so you can correlate it with the DNS resolver your network exits through.

Email

MX Lookup

Look up and rank a domain’s MX records by priority. Highlights split-horizon setups and missing preferences.

SPF Checker

Parse a v=spf1 record at the apex. Reveals mechanisms, includes, redirect, and the final all-qualifier.

DMARC Checker

Inspect _dmarc.<domain>. Reports policy (p), subdomain policy (sp), pct, rua, and ruf in a friendly view.

DKIM Checker

Fetch <selector>._domainkey.<domain> TXT and decode the public-key + key-type fields.

Reputation

Blocklist Check

Check whether a domain is listed on the SecDNS RPZ or well-known public DNSBLs (Spamhaus DBL, SURBL, SpamCop).

Stack-backed tools

Operational utilities backed by the full SecDNS control plane (NestJS API + Celery worker): full-suite security audits, policy import, and zone tooling.

Policy Import

Starter+

Bulk-upload allow / deny domains from CSV. Validates, dedupes, and pushes rules to a profile via PATCH.

Service

apps/api

ProfilesService

POST /v1/profiles/:id/rules/bulk

Worker

—

—

DNS Security Audit

Free (limited) · Enterprise (full)

Scan domains for SPF, DMARC, DKIM, DNSSEC, AXFR exposure, dangling CNAMEs, and 25+ checks with compliance mapping.

Service

apps/api

NestJS API (ScansModule)

POST /v1/scans
GET /v1/scans/:jobId
GET /v1/scans/:jobId/results

Worker

apps/worker

Celery Worker

tasks.py
dns_scanner.py
worker_listener.py

Zone Import

Pro+

Upload a BIND zone file and import records into your hosted zone via PATCH RRsets.

Service

apps/api

ZonesModule

POST /v1/zones
PATCH /v1/zones/:id/records

Worker

—

—

RPZ Policy Test

Starter+

Simulate a DNS lookup against a profile policy. See which allow/deny rule matched (or which blocklists would apply) before deploying.

Service

apps/api

ProfilesService

POST /v1/profiles/:id/test

Worker

—

—

Frequently asked questions

Are these DNS tools free?

Yes. Every tool runs without an account. We rate-limit anonymous traffic to keep abuse down; SecDNS customers get higher quotas through the API.

Where do the answers come from?

Most tools query the authoritative chain via Node’s built-in resolver. The propagation checker pins individual queries to Cloudflare, Google, Quad9, OpenDNS, AdGuard, and SecDNS. The DNSSEC validator routes through Cloudflare’s validating DoH endpoint to read the AD flag.

Can I use the same APIs in my own scripts?

Yes — every tool is a thin wrapper over GET /v1/tools/* on api.secdns.io. The endpoints are documented in the SecDNS Swagger at /docs.

Do the tools store my queries?

Anonymous queries are not associated with an account. We keep aggregate access logs for abuse prevention but do not retain a per-user query history.