For platform, security, and infrastructure teams
Use this path for DNS migrations, control reviews, incident checks, and change verification.
Solution for DNS operations
Review DNS posture before and after a change
Combine current records, security-control evidence, resolver comparisons, certificates, and email authentication into an operational review.
An evidence-based DNS change checklist
Compare expected records with observed answers and keep remaining inconsistencies visible.
A valid record in one lookup is not full migration evidence
Resolvers can cache different answers, controls can be partially configured, and related certificate or email records can lag.
Resolver comparison is not universal propagation proof
The workflow compares configured public recursive resolvers and cannot represent every network, cache, or geography.
Workflow
Compare expected records with observed answers and keep remaining inconsistencies visible.
Capture the expected and observed records
Use DNS Lookup to inspect the record types and authoritative context required by the change.
Review security and service controls
Add DNS Security, Certificate Intelligence, and Email Authentication where those controls are in scope.
Compare configured public resolvers
Use DNS Propagation to find differing answers, then recheck unresolved differences after relevant TTL windows.
Verify a nameserver migration
Capture NS, A, AAAA, MX, TXT, CAA, and DNSSEC-related evidence before and after the approved change.
Example Request
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/dns/security?domain=example.com"Example Response
{
"domain": "example.com",
"security_score": 95,
"security_grade": "A",
"dnssec": { "enabled": true },
"spf": { "exists": true, "valid": true }
}Products in this workflow
Compare expected records with observed answers and keep remaining inconsistencies visible.
DNS Security Analysis
Analyze DNS security configuration including DNSSEC, SPF, DKIM, DMARC, and other security records.
Choose this when: Analyze DNS security configuration including DNSSEC, SPF, DKIM, DMARC, and other security records.
- Inputs
- Domain, DNS name
- Outcomes
- Assess, Protect
- Credits
- 3
SynchronousRESTMCPSDK
Email Authentication
Analyze email authentication records including SPF, DKIM, and DMARC.
Choose this when: Analyze email authentication records including SPF, DKIM, and DMARC.
- Inputs
- Domain, DNS name
- Outcomes
- Verify, Assess, Protect
- Credits
- 1-3
SynchronousBulkRESTMCPSDKInteractive tool
Subdomain Finder
Discover subdomains for a domain using various enumeration techniques.
Choose this when: Discover subdomains for a domain using various enumeration techniques.
- Inputs
- Domain, DNS name
- Outcomes
- Discover, Assess
- Credits
- 4-5
SynchronousBulkRESTMCPSDKInteractive tool
DNS Resolver Comparison
Compare answers from the Cloudflare and Google public recursive resolvers. These are two global-anycast DoH providers, not geographic probes or authoritative nameservers.
Choose this when: Compare answers from the Cloudflare and Google public recursive resolvers. These are two global-anycast DoH providers, not geographic probes or authoritative nameservers.
- Inputs
- Domain, DNS name
- Outcomes
- Compare, Verify
- Credits
- 0-2
SynchronousBulkRESTMCPSDKInteractive tool
Choose this workflow when
Choose this when
You need a repeatable public-evidence review for DNS configuration, security hardening, or migration.
Not for
Do not use it as a DNS control plane, a universal propagation guarantee, or an authorized penetration test.
Related product suites
An evidence-based DNS change checklist
Combine current records, security-control evidence, resolver comparisons, certificates, and email authentication into an operational review.