Email Security

DANE Checker

Look for TLSA records and review whether DANE is published for your mail infrastructure.

About DANE Checks

DANE uses DNSSEC-signed TLSA records to bind certificates to services. For mail, it helps other servers validate the expected certificate during SMTP delivery.

Why teams run this check

• Find TLSA records for the target domain
• Review whether DNSSEC-backed DANE is present
• Inspect certificate-binding metadata
• Support transport-security hardening

What to review

• TLSA record count and contents
• Any DNSSEC dependency notes
• Whether DANE appears usable in practice
• Mismatch or parsing issues returned by the backend

Use the free public result to review signals quickly, then move into the full workspace for continuous monitoring and deeper evidence.

PRO

Nodes Observed12

Resolved Nodes11

Dual-stack Coverage4 / 12

Refresh Window5m

PREVIEW

warningDKIM key strengthreview

errorMTA-STS missingfix

check_circleTLS-RPT not configuredinfo

PRO

PREVIEW

Real-time alertsDISABLED

Cadence—

Enable monitoring with a free account.

PRO

Unlock the full DANE Checker workspace

Create a free account to unlock full access

See full findings

Track this domain daily

Review change history

Get AI analysis

Export analyst-ready evidence