DNS CAA Record Check

Phase 2config mgmtWSTG-CONF

Description

Queries the Google DNS-over-HTTPS API for a CAA (Certification Authority Authorisation) record on the target domain.

Security Impact

Without a CAA record, any certificate authority can issue TLS certificates for your domain. CAA restricts issuance to named CAs, preventing mis-issuance and impersonation attacks.

Automated Detection & AI Remediation

DygDog automatically detects DNS CAA Record Check using its continuous, passive scanning engine. When discovered, DygDog provides infrastructure-specific, copy-paste ready code snippets generated by frontier AI models to help you remediate the issue instantly without generic advice.

Start Free Scan