DNSBuddy
DNS Security Audit

Audit DNS and email security in one run

Run backend checks for authentication, mail transport, DNSSEC, certificate issuance controls, and infrastructure hygiene.

Run full audit
Choose a scope or run the complete audit. Individual findings include evidence and recommended fixes.

Try

Optional. Leave blank to use SPF-guided discovery.

Optional. Choose a provider to score even if SPF does not identify it.

DMARC + DMARCbis
Included in the composed audit and available as a backend check for focused troubleshooting.
SPF
Included in the composed audit and available as a backend check for focused troubleshooting.
DKIM
Included in the composed audit and available as a backend check for focused troubleshooting.
MX
Included in the composed audit and available as a backend check for focused troubleshooting.
MTA-STS
Included in the composed audit and available as a backend check for focused troubleshooting.
TLS-RPT
Included in the composed audit and available as a backend check for focused troubleshooting.
BIMI
Included in the composed audit and available as a backend check for focused troubleshooting.
DNSSEC
Included in the composed audit and available as a backend check for focused troubleshooting.
CAA
Included in the composed audit and available as a backend check for focused troubleshooting.
DANE
Included in the composed audit and available as a backend check for focused troubleshooting.
Nameservers
Included in the composed audit and available as a backend check for focused troubleshooting.