Free DNS Security Checker (DNSSEC & CAA)
Check whether a domain is protected by DNSSEC and restricts certificate issuance with CAA records · two defenses against DNS hijacking and rogue certificates.
Frequently asked
What does DNSSEC protect against?
DNSSEC cryptographically signs DNS responses so attackers can't forge them (cache poisoning / DNS spoofing). Without it, a man-in-the-middle can point your domain at their own servers.
Why do CAA records matter?
A CAA record lists which certificate authorities are allowed to issue TLS certificates for your domain. Without one, any CA can be tricked into issuing a certificate for your site.
Run a full security scan →