DNS analysis
in seconds.
Kuality checks your full DNS record set — A, AAAA, MX, TXT, CNAME, NS, and SOA — validates propagation across resolvers, detects dangling CNAMEs that create subdomain takeover risk, and flags missing email authentication records.
blog.yoursite.com CNAME points to a deprovisioned Heroku app — subdomain takeover risk.
Complete DNS record validation
Kuality queries your domain across multiple DNS resolvers and validates every record type that affects uptime, email delivery, and security.
A & AAAA Records
Resolves IPv4 and IPv6 address records and cross-checks them against your HTTPS certificate's Subject Alternative Names for misconfiguration.
MX Record Health
Checks mail exchange records for presence, priority ordering, and whether each mail server hostname resolves and accepts SMTP connections.
Dangling CNAME Detection
Identifies CNAME records pointing to deprovisioned services (Heroku, GitHub Pages, S3, Fastly) that allow subdomain takeover by an attacker.
Email Auth Records
Validates SPF, DKIM, and DMARC presence and configuration in TXT records. Flags spoofing gaps and SPF lookup limit violations.
Propagation Check
Queries 8.8.8.8, 1.1.1.1, and regional resolvers to verify that DNS changes have propagated globally — useful after migrations and TTL changes.
TTL Analysis
Reports TTL values for each record type. Flags TTLs that are too high before a planned migration or too low in steady-state (unnecessary resolver load).
DNS is one of 17 checks in Kuality
Run DNS analysis alongside email security, SSL, security headers, and uptime monitoring — all in a single scan, tracked over time.
Analyze your DNS freeFree plan. No credit card. No DNS credentials needed.