> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS & Certificate Intelligence

> Monitor DNS configurations, SPF/DKIM/DMARC records, and SSL/TLS certificate health.

Misconfigured DNS and expired certificates degrade customer trust and create security vulnerabilities.

***

## DNS Intelligence

* **Record Types Tracked**: A, AAAA, CNAME, MX, TXT, NS, SOA, and SRV records.
* **Email Security Validation**: Automated checks for SPF policy syntax, DKIM selectors, and DMARC enforcement (`p=reject`).
* **Zone Transfer Testing**: Flags exposed DNS servers permitting unrestricted AXFR transfers.

***

## Certificate Intelligence

* **Validity & Expiry Monitoring**: Alerts triggered at 30, 14, and 7 days prior to SSL expiration.
* **Weak Cipher Detection**: Flags deprecated protocols (SSLv3, TLS 1.0, TLS 1.1) and insecure ciphers (RC4, 3DES).
* **Wildcard & Multi-Domain Inspection**: Surfaces subdomains covered under wildcard certificates.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.