DNS Security (CAA/DNSSEC)

Phase 8config mgmtWSTG-CONF

Description

Checks DNS CAA records for certificate authority restrictions and DNSSEC deployment status.

Security Impact

Without CAA, any CA can issue certificates for your domain. This module verifies DNS-level security controls.

Automated Detection & AI Remediation

DygDog automatically detects DNS Security (CAA/DNSSEC) using its continuous, passive scanning engine. When discovered, DygDog provides infrastructure-specific, copy-paste ready code snippets generated by frontier AI models to help you remediate the issue instantly without generic advice.

Start Free Scan