DNSSEC on every zone. DMARC reports parsed. MTA-STS hosted. TLSA generated. Built on deSEC — open, non-profit, Berlin-based.
No credit card required. 2 zones free forever.
From record management to email security — one dashboard, zero complexity.
Every zone gets DNSSEC automatically. DS records displayed for easy registrar setup.
Ingest aggregate XML reports. Visualize alignment trends and failure sources over time.
Serve .well-known/mta-sts.txt for your domains. Declare TLS support for mail delivery.
Input a mail server hostname. We fetch TLS certs and generate TLSA records automatically.
Guided UI with presets for Let's Encrypt, DigiCert, Sectigo, Google, and more.
Automate everything. Zone CRUD, bulk operations, BIND import/export, webhooks.
Automated MX, SPF, DKIM, DMARC, DNSSEC checks. Dangling CNAME detection. Email alerts.
Query Google, Cloudflare, and Quad9 resolvers. See propagation status per record in real time.
One-click setups for Google Workspace, Microsoft 365, Fastmail. BIND zone file import.
Powered by deSEC, a free, open-source DNS hosting service run as a non-profit in Berlin. 10% of our revenue goes directly to deSEC.
Start with 2 free zones. No credit card. No setup hassle.