dns-hygiene-checker

dns-hygiene-checker is a free, open-source, zero-dependency Python CLI that audits a domain's DNS hygiene: SPF/DKIM/DMARC presence and correctness, dangling CNAME records pointing at deprovisioned services, missing/weak records, and other common DNS misconfigurations that lead to spoofing or subdomain takeover. No signup, no telemetry, MIT-licensed. Built by Errant Solutions alongside a small family of similar free auditing tools (sshd-hardening-auditor, tls-cert-watchdog, cert-transparency-watcher) - pay-what-you-want if it saves you time.

Homepage Download