DNS Records Audit
Pricing
$150.00 / 1,000 completed audits
DNS Records Audit
A full DNS record inventory (A, AAAA, MX, NS, TXT, CAA, SOA, CNAME) over DNS-over-HTTPS, with the misconfigurations that matter flagged: missing CAA, no MX, apex CNAME, missing SPF/DMARC, no IPv6, no DNSSEC, single nameserver. Charged only on completed audits.
Pricing
$150.00 / 1,000 completed audits
Rating
0.0
(0)
Developer
Chris Arsenault
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
4 days ago
Last modified
Categories
Share
The whole DNS zone at a glance, with the misconfigurations that matter flagged. One call inventories a domain's A, AAAA, MX, NS, TXT, CAA, SOA, and CNAME records over DNS-over-HTTPS, then checks the things teams forget: a missing CAA record (any certificate authority can then issue a cert for your domain), no MX, an illegal apex CNAME, missing SPF/DMARC, no IPv6, no DNSSEC, and single-nameserver setups with no redundancy.
What you get
Summary plus one row per record:
{"domain": "example.com","record_types_present": ["A", "MX", "NS", "SOA", "TXT"],"caa_present": false,"spf_present": true,"dmarc_present": true,"dnssec": false,"issues": ["No CAA record: any certificate authority can issue a certificate for this domain.","DNSSEC not enabled (no DNSKEY)."]}
Use cases
- Onboarding and migrations: confirm a zone is complete and correct before and after a DNS change.
- Security posture: CAA and DNSSEC are quiet but real controls; this surfaces their absence.
- Agents doing infrastructure due diligence: a full-zone read as one tool call.
This complements the Email Deliverability DNS Audit (which grades SPF/DKIM/DMARC in depth) with the whole-zone view and certificate-issuance controls.
Honesty notes
- Resolution runs over Cloudflare and Google public DoH; no zone transfer, nothing modified.
- A domain that does not resolve reports cleanly and you are not charged; billing is per completed audit.
Built by 1450 Enterprises, alongside Domain Intel and the Email Deliverability DNS Audit.