Tools/DNS Security Audit
Scan domains for SPF, DMARC, DKIM, DNSSEC, AXFR exposure, dangling CNAMEs, and 25+ checks with compliance mapping.
Scan domains for SPF, DMARC, DKIM, DNSSEC, AXFR exposure, dangling CNAMEs, and 25+ checks with compliance mapping.
apps/api
NestJS API (ScansModule)
apps/worker
Celery Worker
Scans are queued via the API service and executed by the Celery worker. Results include risk scoring and compliance mapping (CIS, NIST, ISO, SOC2, GDPR, KVKK).
SPF, DMARC, DKIM, MX configuration, DNSSEC, AXFR (zone transfer) exposure, dangling CNAMEs, CAA, wildcard records, open recursion, NS reachability, PTR, TLSA, NSEC enumeration, SOA sanity, and 10+ more checks — 25+ in total.
Yes. Anonymous public audits are free and you get a shareable report at /report/{domain}. Higher-tier plans add private scans, longer history, and API access.
Every finding has a severity (critical, high, medium, low, info) and deducts points from a base of 1000. Critical findings deduct 250 each, high 150, medium 80, low 30. The remaining value is your DNS risk score.
Anonymous scans produce a public, shareable report at /report/{domain}. Paid plans can run private scans that only the owner can view.
Most scans finish in 30–60 seconds. The job is queued by the API and executed by a Celery worker that runs the 25+ checks in parallel against authoritative and public resolvers.
CIS, NIST CSF, ISO 27001, SOC2, GDPR, and KVKK. Each finding includes the relevant control references where applicable.