DNS Intelligence
- Record Types Tracked: A, AAAA, CNAME, MX, TXT, NS, SOA, and SRV records.
- Email Security Validation: Automated checks for SPF policy syntax, DKIM selectors, and DMARC enforcement (
p=reject). - Zone Transfer Testing: Flags exposed DNS servers permitting unrestricted AXFR transfers.
Certificate Intelligence
- Validity & Expiry Monitoring: Alerts triggered at 30, 14, and 7 days prior to SSL expiration.
- Weak Cipher Detection: Flags deprecated protocols (SSLv3, TLS 1.0, TLS 1.1) and insecure ciphers (RC4, 3DES).
- Wildcard & Multi-Domain Inspection: Surfaces subdomains covered under wildcard certificates.