DNS Records Audit avatar

DNS Records Audit

Pricing

$150.00 / 1,000 completed audits

Go to Apify Store
DNS Records Audit

DNS Records Audit

A full DNS record inventory (A, AAAA, MX, NS, TXT, CAA, SOA, CNAME) over DNS-over-HTTPS, with the misconfigurations that matter flagged: missing CAA, no MX, apex CNAME, missing SPF/DMARC, no IPv6, no DNSSEC, single nameserver. Charged only on completed audits.

Pricing

$150.00 / 1,000 completed audits

Rating

0.0

(0)

Developer

Chris Arsenault

Chris Arsenault

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

4 days ago

Last modified

Share

The whole DNS zone at a glance, with the misconfigurations that matter flagged. One call inventories a domain's A, AAAA, MX, NS, TXT, CAA, SOA, and CNAME records over DNS-over-HTTPS, then checks the things teams forget: a missing CAA record (any certificate authority can then issue a cert for your domain), no MX, an illegal apex CNAME, missing SPF/DMARC, no IPv6, no DNSSEC, and single-nameserver setups with no redundancy.

What you get

Summary plus one row per record:

{
"domain": "example.com",
"record_types_present": ["A", "MX", "NS", "SOA", "TXT"],
"caa_present": false,
"spf_present": true,
"dmarc_present": true,
"dnssec": false,
"issues": [
"No CAA record: any certificate authority can issue a certificate for this domain.",
"DNSSEC not enabled (no DNSKEY)."
]
}

Use cases

  • Onboarding and migrations: confirm a zone is complete and correct before and after a DNS change.
  • Security posture: CAA and DNSSEC are quiet but real controls; this surfaces their absence.
  • Agents doing infrastructure due diligence: a full-zone read as one tool call.

This complements the Email Deliverability DNS Audit (which grades SPF/DKIM/DMARC in depth) with the whole-zone view and certificate-issuance controls.

Honesty notes

  • Resolution runs over Cloudflare and Google public DoH; no zone transfer, nothing modified.
  • A domain that does not resolve reports cleanly and you are not charged; billing is per completed audit.

Built by 1450 Enterprises, alongside Domain Intel and the Email Deliverability DNS Audit.