Every DNS record you have never read.
Opens DNS Health Check with results.
- Failed a check89%
- Passed all six11%
* 1,007 NIS2 domains scanned. Failed at least one of SPF, DKIM, DMARC, MX, DNSSEC, Domain blacklist.
The scan
Thirty-five checks, five layers deep, in one run.
The free tier runs six checks with no account. Every paid tier runs all thirty-five, on a schedule, and keeps the history.
The score
One number, five layers behind it.
Every finding rolls up into a weighted score, so you always know which layer is dragging the domain down, and exactly how much each fix will move it.
The fix
Every finding ships with the record.
No finding ends at “configure DMARC correctly.” It ends at the value, the host, the TTL, and the screen in your registrar where they go, for Cloudflare, Route 53, GoDaddy and Namecheap.
After the fix
Then it keeps reading.
A probe every few minutes catches drift: a deploy rewrites SPF, a certificate lapses, a subdomain is left pointing at a host someone else can claim. You hear about it before your customers do. And each day's full audit is written to a timestamped evidence chain you can hand to an auditor.
Evidence
Audit-ready, without the audit prep.
NIS2, SOC2 and ISO 27001 reports generate themselves from 90 days of tamper-proof probe history, white-labeled with your own logo when you need to hand it to a client.
Who runs it.
SaaS and e-commerce
Your receipts and password resets have to reach the inbox. A scan tells you which record is sending them to spam.
MSPs
Every client domain on one dashboard. You get the alert at midnight and the fix is applied before anyone files a ticket.
Agencies
Run a scan at handover and ship the report with the site. Clients see what you caught before launch.
Security and compliance
An auditor asks for proof you monitor DNS. Export 90 days of probe history with a hash chain attached.
Scan a domain you own.
Six checks free, no account. Full scans and monitoring start at $29 a month, two months free on annual.