DNS Security record checker
Current average score : 2.18
Current average based on 1785 domains.
There are several DNS records that are used to improve security and which are considered to be good things to have such as: SPF, DKIM, DMARC and most recently CAA. Configuring and maintaining these records can be painful and very few companies have implemented even half of them. This tool does a quick quality check of which of these records are published for a domain and gives a health score. It does not do indepth validation, there are other people that do that sort of thing.
CAA, DNSSEC, DKIM 2 points each.
SPF 1 point for a record, then 0 points for a "?all" policy, 0.5 for "~all" and 1 point for "-all".
DMARC 0-1 points based on the "pct=" value, 0.5 for "sp=quarantine" or 1 point for "sp=reject".
N.B. The results generated by this tool may be recorded for research purposes - no other informtation will be saved.