DNSDeets
Complete domain security analysis in seconds
Fast, actionable insight on email authentication, DNS records, TLS, and security best practices. And we never show a value we didn't observe.
Explainable score
No black box: every deducted point maps to a finding with the observed record, why it matters, and how to fix it.
Two lenses
Written for owners in plain English, with the full technical detail one click away for MSPs and admins.
Real API
The same scan, as JSON. curl it, script it, or point your AI assistant at /llms.txt.
Questions
What does DNSDeets check?
Email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT), DNS hygiene (nameservers, DNSSEC, CAA), TLS and HTTP security headers, and domain registration health. About 70 checks in one scan.
Is it really free?
Yes. Scans, the full findings ledger, the API, and the PDF export are free. A paid tier with continuous monitoring is coming.
How is the score calculated?
Every failed check deducts a fixed number of points by severity (critical 20, high 10, medium 5, low 2) from 100. The full deduction ledger is shown with every scan, so there's no black box.
Do you store my domain?
Anonymous scans keep the domain for 30 days, then it's deleted. We store hashed IPs only, never full user agents, and use one first-party cookie. No ads, no third-party analytics.
Can I use it from scripts or AI agents?
Yes. GET https://dnsdeets.com/api/v1/scan?domain=example.com returns full JSON. See the API docs and /llms.txt.