📡 DNS Monitor
DNS health monitoring, change detection, and security validation for your WordPress domain. Monitor your domain's DNS configuration in real-time. Validate nameservers, SOA, MX, SPF, DKIM, DMARC, DNSSEC, CAA records, and SSL certificates — all from your WordPress dashboard. Get alerts when anything changes.
See It in Action
Explore the admin interface — click any screenshot to zoom
What This Solves
DNS misconfiguration is one of the most overlooked security risks. A missing SPF record means anyone can spoof your domain in emails. An expired SSL certificate breaks trust and SEO. Changed nameservers can indicate a domain hijack. DNS Monitor watches all of this continuously so you catch problems before your users do.
Who This Module Is For
Site Owners Concerned About Email Deliverability
SPF, DKIM, and DMARC validation ensures your emails aren't flagged as spam and your domain can't be spoofed. Know instantly if your email authentication records are misconfigured.
Agencies Managing Multiple Domains
Monitor DNS health across all client domains. Get alerts on changes before clients notice issues. One dashboard to track nameservers, SSL certificates, and email records.
Security-Conscious Administrators
DNS hijacking and subdomain takeover are real attack vectors. Continuous monitoring catches unauthorized changes immediately so you can respond before damage is done.
Key Features
DNS Health Score (0–100)
Weighted score across 9 check categories: NS, SOA, MX, SPF, DKIM, DMARC, DNSSEC, CAA, and web records. Know your DNS health at a glance.
Email Security Validation
Validates SPF syntax and lookup count, DKIM selector records, and DMARC policy with alignment checks. Recommendations to fix issues.
SSL Certificate Monitoring
Track certificate expiry with 30/14/7-day warnings. View issuer, SANs, protocol, and signature algorithm. Never get caught by an expired certificate again.
Change Detection & Alerts
Automatic DNS snapshots with diff comparison. Email alerts when any record changes — nameservers, MX, TXT, or anything else.
DNSSEC Validation
Checks DNSSEC signing status via DNS-over-HTTPS. Verifies your domain's chain of trust is intact and alerts you if it breaks.
CAA Record Analysis
Validates Certificate Authority Authorization records. Ensures only approved CAs can issue certificates for your domain.
9 DNS Check Categories
DNS Monitor evaluates your domain across nine distinct categories, each with multiple sub-checks. Every category contributes to your overall health score with appropriate weighting.
Record Checks
- Nameservers (NS) — Validates count ≥2, no CNAME aliases, TCP connectivity, subnet diversity
- Start of Authority (SOA) — Checks serial format, refresh/retry/expire/minimum values against RFC 1912
- Mail Exchange (MX) — Validates presence, priority ordering, PTR records, no CNAMEs, failover redundancy
- SPF (Sender Policy Framework) — Parses syntax, counts DNS lookups (≤10 limit), checks for dangerous
+all - DKIM (DomainKeys Identified Mail) — Verifies TXT record at
selector._domainkeysubdomain
Security Checks
- DMARC (Domain-based Message Authentication) — Validates policy (none/quarantine/reject), alignment, reporting URIs
- DNSSEC — Checks signing status via Google DNS-over-HTTPS API with DO flag
- CAA (Certificate Authority Authorization) — Validates which CAs are authorized to issue certificates
- Web Records — A/AAAA resolution for root and www, TTL sanity checks
How It Works
All checks use pure PHP functions (dns_get_record, gethostbyname, fsockopen, stream_socket_client). No exec(), no shell commands, no server access required. Works on any hosting environment including shared hosting.
Why Upgrade to Pro
Free gives you on-demand DNS health checks. Pro adds automated scheduled monitoring (hourly checks), change detection with email/Slack alerts, extended check history up to 10 years, PDF DNS health reports, and priority support. See this data in your cloud dashboard — alongside all your other sites.
Free vs Pro
Keep full DNS health checking for free. Pro adds automated monitoring, change alerts, and extended history for business-critical domains.
| Feature | Free | Pro |
|---|---|---|
| DNS health checks (9 categories) | ✓ | ✓ |
| SSL certificate monitoring | ✓ | ✓ |
| On-demand scanning | ✓ | ✓ |
| Check history | 7 days | Up to 10 years |
| Automated scheduled checks | ✗ | ✓ Hourly |
| Change detection & alerts | ✗ | ✓ |
| PDF DNS health reports | ✗ | ✓ Weekly |
| Priority support | Community | 24h email |
| €0 forever | €79 /year (10 sites) — €6.50/mo | |
| Included Free | Start Free Trial No credit card required |
All Pro features included in the Pro plan at €79/year (10 sites). Managing client sites? See Agency plan →
Ready to Monitor Your DNS?
Install DNS Monitor from the WordPress plugin directory and run your first health check in minutes.
Get Started Free See All Plans →