DNS & attack surface

DNSSEC enabled

DNS hygiene, subdomains, takeover risks and domain registration.

Why it matters

Forged DNS answers can redirect visitors or mail to an attacker's server without any warning.

How to fix it

Quick fix · under 1 hour

Enable DNSSEC signing at your DNS provider (often a single switch).
Copy the DS record it shows into your registrar's control panel.

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free