DNS Health Check & Best Practice Score
Free DNS health check and RFC-based best practice audit for any domain. NODA scores DNS, mail, and security separately -- never blended into one score.
About NODA Check
NODA scores the DNS configuration behind any domain — not just whether it resolves, but whether it is built the way current best practices recommend. A domain can be technically "up" while still being wide open to spoofing, running on a single point of failure, or silently failing to authenticate its own mail — the kind of gap that stays invisible until an outage, a phishing incident, or a security audit forces the question.
Every domain is scored on two independent axes: Health — does the DNS actually work right now — and Best Practice — is it configured the way current standards recommend. Keeping these separate matters, since a domain can pass one and fail the other, and collapsing them into a single number would hide exactly the distinction worth knowing. Both scores are built from 41 checks across five weighted categories — infrastructure, security, mail authentication, reliability, and operations — following a versioned, publicly documented methodology rather than a black-box heuristic.
Where does your industry stand?
Bulk DNS audits across real-world sectors — methodology-backed, dataset-driven.
Top of the Class, Behind on Security
Infrastructure is rock solid. DNSSEC and mail authentication are a generation behind.
Read the research → 103 MuseumsPriceless Collections, Fragile Infrastructure
The widest score spread we've measured — and real outages hiding behind prestige.
Read the research → 102 Sports BrandsBuilt for Speed, Not for Signing
DNSSEC is nearly absent. DKIM is missing on more than half. DMARC enforcement leads every sector we've measured.
Read the research → 81 Government DomainsNo Mandate Required
Highest DNSSEC adoption of any sector measured — with no signing mandate behind it. The same agencies lag badly on DKIM.
Read the research → 596 Domains, 9 SectorsNine Sectors, One Pattern
Cryptographic signing and mail authentication are treated as separate disciplines almost everywhere — including inside the same organizations.
Read the research → 82 Enterprise Tech DomainsPhysician, Heal Thyself
The consultancies who sell DNS hardening for a living outscore the hyperscale clouds whose DNS-as-a-service tooling they resell.
Read the research →