72 diagnostic checks. One domain. Results in under 5 seconds.
Parent Zone
6checks
Delegation from parent zone
Nameservers
13checks
Configuration and redundancy
Start of Authority
9checks
Zone health and timing
Mail Servers
10checks
Mail server configuration
Email Authentication
14checks
SPF · DKIM · DMARC · BIMI
★ Most criticalWeb Presence
9checks
HTTP · HTTPS · SSL · redirect
DNSSEC
5checks
Chain of trust and signing
Blacklists
6checks
50+ RBL lists checked
Every other DNS tool shows you raw records. DNSSnuff tells you what they mean.
Raw DNS output
v=DMARC1; p=none; rua=mailto:rpts@example.com Status: WARN
DNSSnuff verdict
Your domain can currently be spoofed. DMARC is set to none. Change to p=quarantine to fix this.
The DNS Report is always free. Pro adds monitoring.