DNSSEC Check: Analysis Tool

CyprNet Solutions

In-app purchases

About this app

DNSSEC Check: Professional DNS Security and Validation Tool

Perform deep trust-chain validation, cryptographic audits, and standards-compliant reporting for any domain — all powered by the CyprNet Secure TrustPath Engine. This is the essential DNSSEC analysis tool for network and security professionals.


— End-to-End DNSSEC Analysis —

• Parent → child zone validation with authoritative-direct probing (DO=1, UDP 1232, TCP fallback)


• Operates through corporate recursive resolvers when direct probing is restricted


• DS ↔ DNSKEY mapping with match coverage


• SHA-1 detection and crypto-grade scoring


• RFC 8078 support: detect CDS/CDNSKEY for automated trust-anchor updates


• Unified TrustReport model powering UI and HTML reports

— Free (Analysis) Experience —

• Trust Chain Integrity: compact DS↔DNSKEY summary, parent zone info, match counts


• Cryptographic Profile: SHA-1 cap indicator; DNSKEY algorithm list


• Coverage of Signed RRsets: overall % from scoring


• Pro features previewed with six distinct cards (headline metric visible; details blurred)

— Pro Capabilities (Full Toolset) —
The Pro version unlocks the full suite of DNSSEC security features, including:

• Delegation (CDS/CDNSKEY): presence detection, counts, TTL; guidance when missing (RFC 5011)


• Parent ↔ Child Linkage: DS digest ↔ DNSKEY tag mapping, SHA-1 warnings, copyable records


• Key Audit: algorithm distribution, KSK/ZSK counts, earliest/median RRSIG expiry


• Coverage: SOA, NS, DNSKEY, apex A/AAAA, MX coverage of Signed RRsets


• Mobile-First HTML Report: Professional, sortable, and shareable reports with findings and artifacts


• Findings & Recommendations: Critical / Warning / Info; items link to report anchors

— Vantage Modes —

• Authoritative-Direct: probes authoritative NS (RD=0, DO=1) with TCP fallback


• Corporate-Recursive: labels resolvers; shows samples and capabilities; notes limitations

Built by CyprNet Solutions — Trusted tools for network and security professionals.

Analyze. Validate. Trust.

What’s new

PROD: 1.0.16 - Updated Billing Visual
- FREE: Instant Secure Status at a Glance Portal
- FREE: DNSSEC 101 Admin Guide
- FREE: Full Analysis and Review
- FREE: Full functional Pro Demo Mode
- PRO: HTML Reporting with Reactive Pages
- PRO: RFC Compliance Checking
- PRO: DS, DNSKEY and RRSIG validation
- PRO: Export and Email
- PRO: DNS Client w/DNSSEC Records