DNS Security Audit — SPF, DKIM, DMARC & DNSSEC
One-click audit of a domain’s email and DNS security posture — SPF, DKIM, DMARC, DNSSEC, TLS — with a risk score.
A quick, free way to audit a domain’s security posture. The audit checks SPF, DKIM and DMARC records for email spoofing protection, DNSSEC for DNS integrity, and TLS configuration — then scores the domain and lists each check with a pass/fail verdict. Free 5 audits per day per IP, no signup.
Daily free limit reached
You've used your 5 free uses today. Continue pay-per-use via the DeFi Intel Agent Gateway API, or add a prepaid API key above for unlimited use.
Use this at scale or in your own tools
The same engine powers the DeFi Intel Agent Gateway: 40+ paid microservices on USDC (Base), no API keys required for pay-per-call, MCP transport for AI agents. Free samples daily.
Frequently asked questions
Is the DNS security audit free?
Yes — 5 free audits per day per IP, no signup. Beyond that, use the DeFi Intel Agent Gateway API (pay-per-use) or a prepaid API key.
What exactly is checked?
SPF (email sender authorization), DKIM (signed mail), DMARC (policy for unauthenticated mail), DNSSEC (DNS integrity), and TLS (secure transport). Each returns pass/fail with a message.
What does the risk score mean?
The score (0-100) reflects overall posture: higher is better. A high score means strong records and TLS; a low score means missing or weak protections that make spoofing or interception easier.
How do I fix a failing check?
Each check includes a message explaining the issue, e.g. "SPF record not found". Add the relevant record at your DNS provider and re-run the audit to confirm.
Powered by the DeFi Intel Agent Gateway (x402/MPP, USDC on Base). Free tier: 5 calls/day/IP. Prices from $0.001/call. For education — not financial advice.