DNSai security tool

DNSSEC Checker

Grade DNSSEC for a domain and the domains it depends on, including DS/DNSKEY trust material, authenticated DNS answers, MX, NS, CNAME, CAA issuers, DMARC, and SPF-discovered dependencies. Depth defaults to direct dependencies to avoid over-penalizing unrelated provider infrastructure.

Example: domain.com. The checker uses DNS-over-HTTPS with DNSSEC enabled and follows operational dependency domains.