Domain Health Scanner
Checks your domain's CAA and DNSSEC records and its expiry date to keep it protected.
What it checks
This scanner reviews your domain's basic health: its CAA records, its DNSSEC status and its expiry date. With that it checks that your domain is protected against unwanted certificate issuance and DNS tampering.
Why it matters
A domain without CAA lets any authority issue certificates for it, and without DNSSEC its resolution is easier to spoof. And if the domain expires by oversight, you can lose your website and email, or even have someone else grab it.
How to fix it
Add a CAA record that limits which authorities can issue certificates for your domain and enable DNSSEC at your DNS provider. Set up auto-renewal for the domain plus an expiry alert so you never lose it by forgetting.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free