Free DNS posture scan · no sign-up
Domain Explorer
Illuminate the hidden DNS structure of any domain, get a DNS Score, and receive recommendations for fixing issues
Queries go via public DoH resolvers. Results cached ≤ 30 min. DNS Panopticon provides informational analysis of DNS data for convenience only. Results may be incomplete or inaccurate and should not be relied upon as the sole basis for operational or security decisions. Always verify findings using authoritative sources and your own DNS infrastructure. Use of this site and its tools is at your own risk.
What a scan covers
Every record that decides whether your domain is trustworthy
- NSDelegationName server redundancy, lame delegation and SOA health.
- DSDNSSECWhether the chain of trust is present, valid, or silently broken.
- TXTSPF & DMARCSpoofing protection: missing or duplicate records and policy strength.
- MXMail routingMail exchangers, DKIM, MTA-STS, DANE and BIMI.
- CAACertificate policyWhich authorities may issue certificates for the domain.
- CNAMEAliases & wildcardsApex CNAMEs, CNAME loops and wildcard DNS.
More tools
Go deeper than a single scan
Domain Recon
Find the registrar, DNS, CDN and hosting providers behind a domain, and where to report abuse.
Open Domain Recon →
Zone Analyzer
Upload a zone export to filter, sort and screenshot every web-facing record in your browser.
Open Zone Analyzer →
Market Index
See how S&P 500 companies score on DNS posture next to their delayed market prices.
Open Market Index →