Free DNS Security Checker (DNSSEC & CAA)
Check whether a domain is protected by DNSSEC and restricts certificate issuance with CAA records · two defenses against DNS hijacking and rogue certificates.
Frequently asked
What does DNSSEC protect against?
DNSSEC cryptographically signs DNS responses so attackers can't forge them (cache poisoning / DNS spoofing). Without it, a man-in-the-middle can point your domain at their own servers.
Why do CAA records matter?
A CAA record lists which certificate authorities are allowed to issue TLS certificates for your domain. Without one, any CA can be tricked into issuing a certificate for your site.
Related tools
- DNS Lookup · Query any domain's DNS records live · A, AAAA, CNAME, MX, TXT, NS, and CAA · resolved over encrypted DNS-over-HTTPS.
- security.txt Validator · Check whether a site publishes a valid security.txt · the RFC 9116 file that tells researchers how to responsibly report vulnerabilities.
- CORS Tester · Test any URL for dangerous CORS misconfigurations · origin reflection, wildcard-with-credentials, and null-origin acceptance that can leak authenticated data.