Support & Documentation

DNS Panopticon is a suite of tools for inspecting, analysing, and verifying DNS configurations. All zone-file parsing happens locally on your computer — your export file is never uploaded elsewhere.

A lightweight tool for parsing and reviewing DNS zone exports from BlueCat, Infoblox, BIND servers, NSD/Knot, PowerDNS, and similar BIND-style exports. Load a .db, .zone, or .txt file to explore your DNS records in a searchable, filterable table.

The Zone Analyzer parses DNS zone exports locally and presents records in a structured grid for rapid inspection, filtering, and lightweight validation. It helps administrators quickly surface formatting issues, duplicate entries, and anomalies.

Features

• Load DNS Export File — drag-and-drop or click to upload a DNS zone export (BlueCat, Infoblox, BIND, NSD/Knot, PowerDNS, and more).
• Filters — build custom filter rules to narrow records by zone, type, hostname, or data.
• Quick Pills — one-click filters to hide SOA/NS noise, PTR records, or focus on web-facing records.
• Export CSV — download the currently filtered records as a CSV file.
• Visual Verification — opens screenshots of web pages only for specifically checked A, AAAA, and CNAME rows. This guard rail prevents accidentally submitting very large batches.

Domain Explorer scans a domain's DNS records live and analyses them for security issues, misconfigurations, and best-practice violations. Results are scored and graded across multiple security categories.

Scan modes

Quick

NS, SOA, A, AAAA, MX, TXT only — fastest, no derived names

Standard

Full apex record set plus common derived names (www, _dmarc, etc.)

Deep

Standard plus wildcard probing and extended record types

Score & grade

The 0–100 score is a weighted average across six categories: Security (28%), DNSSEC (15%), Reliability (22%), Mail (15%), Web (10%), and Delegation (10%). Letter grades map A+ ≥ 97, A ≥ 90, B ≥ 80, C ≥ 70, D ≥ 60, F < 60.

Graph

The Sankey graph visualises the hierarchy of your domain's DNS records — from domain root → apex/derived names → record types → record values. Enable Show findings to see how failing checks connect to specific records.

Privacy

Queries are resolved via Cloudflare and Google DoH. No domain names or query results are associated with your IP. Results may be cached server-side for up to 30 minutes to reduce resolver load and improve response times.