DNSAudit.io - DNS Security & Attack Surface

A quick DNS look at the site you're on, with one click through to the full DNSAudit.io report.

Check the DNS security and attack surface of any domain in one click. DNSAudit reads the public DNS of the site you are on and shows a quick, factual snapshot across five tabs, then links you to the full DNS security report when you want the graded findings and fixes. DNS is part of your security posture. Misconfigured email authentication, missing DNSSEC, permissive CAA, or forgotten hostnames that still resolve all widen a domain's attack surface. This extension surfaces those signals fast, straight from the tab you are on. What it checks Overview: a DNS security posture read by area (email auth, transport, DNS integrity), an exposure summary, and the last DNSAudit grade when the domain has been scanned before. Email authentication: SPF with its qualifier and DNS lookup count, DKIM at common selectors, DMARC policy and reporting, MTA-STS and TLS-RPT. DNS integrity: DNSSEC, the certificate authorities allowed by CAA, DANE/TLSA, a wildcard check, and a DNS rebinding check that flags private IPs in public records. Infrastructure: nameservers and their provider, IPv4 and IPv6, and mail servers. Attack surface exposure: integrations detected from TXT records, reverse DNS with the forward-confirmed (FCrDNS) check, and common sensitive hostnames that resolve, such as admin, vpn, staging or api. Hover any row to see the record behind it. It is a fast factual look, not a verdict. The graded findings, severities, and recommended fixes live in the full report on DNSAudit.io. Built for security engineers, DNS and infrastructure teams, SOC analysts, and developers responsible for domain configuration. Useful when you are reviewing your own domains, triaging a phishing report, or checking a domain in an incident writeup. You can also right click a domain or a link to run the same quick look. Privacy The snapshot is read live from public DNS over HTTPS, the same data anyone can query. The extension only looks up the domain you choose. It does not read page content and does not track the sites you visit. The quick look needs no account. Run the full DNS security scan on DNSAudit.io, where every finding is graded with a severity and a fix. Found something off? Write to support@dnsaudit.io.