DNS Health Check & Dependency Map.
One domain, four checks: SPF, DKIM, DMARC and DNSSEC. Each one maps to a node below with its own pass, warning, or missing state. Free, no signup required.
No domain mapped yet.
Enter a domain above to see SPF, DKIM, DMARC and DNSSEC laid out as four independent nodes, each one click away from its raw record.
Why four, and in this order.
SPF | who can send
Lists the servers authorized to send as this domain. Checked first because everything else builds on it.
DKIM | is it intact
A cryptographic signature proves the message body was not altered in transit.
DMARC | what happens on failure
Ties SPF and DKIM together and tells receivers whether to reject mail that fails both.
DNSSEC | can the records be trusted
Signs the zone itself, so none of the above can be spoofed by tampering with DNS responses.
Four nodes today, watched every day.
ZeroHook re-maps this same picture daily across every domain you own and tells you the morning a node changes state.
Fix issues before they affect customers
Get automated monitoring, real-time alerts, and continuous scanning.
Free Account
- Copy-paste DNS fixes
- Daily automated scans
- Real-time alerts
- Full security audit
Full monitoring
- Copy-paste DNS fixes
- Daily automated scans
- Real-time alerts
- Full security audit
Free forever plan available · Paid plans from $29/mo