Security Posture

An overall security grade for any domain, built from public DNS, website and other evidence, with each area graded on its own card

Try

DNS Panopticon provides informational analysis of DNS data for convenience only. Results may be incomplete or inaccurate and should not be relied upon as the sole basis for operational or security decisions. Always verify findings using authoritative sources and your own DNS infrastructure. Use of this site and its tools is at your own risk.

What a Security Posture grade covers

Each area gets its own A+ to F grade, and the areas are weighted into one grade for the domain.

  • MAILEmail SecuritySPF, DMARC policy, DKIM, MTA-STS, BIMI and DANE for mail.
  • DNSDNS SecurityDNSSEC, name server redundancy, lame delegation, SOA and wildcard records.
  • TLSTLS and CertificatesCAA records that limit who may issue certificates, and DANE for HTTPS.
  • WEBWebsite Application SecurityHTTPS and its redirect, HSTS, security headers and cookie flags on the homepage.
  • CVEVulnerability ManagementKnown vulnerabilities and unsupported releases in the server software the website names.

More tools

Free, no account needed.