DNS

Anyone could issue a certificate for your domain — would you know?

DNSSEC validation, CAA records locking down who can issue TLS certificates, nameserver redundancy, and IPv6 reachability — the parts of a domain's posture that sit below the website and rarely get checked.

DNSSEC validated
CAA issuer lockdown checked
Nameserver redundancy
Free, no account

Try: cloudflare.com · example.com | Email check → · Header scanner →

Try it live — real grades

cloudflare.com check → github.com check → wikipedia.org check → stripe.com check →