Blackveil DNS Security Scanner

Example Use Cases

• 1

  Perform comprehensive DNS and email security scans across multiple protocols and clients.

• 2

  Integrate DNS security grade enforcement into CI/CD pipelines.

• 3

  Plain-English remediation guidance for DNS and email security findings.

Description

Blackveil DNS is an open-source security scanner that performs over 57 checks across 20 categories including SPF, DMARC, DKIM, DNSSEC, SSL/TLS, and more. It provides maturity staging, trust surface analysis, and plain-English remediation guidance. The service is passive and read-only, using public Cloudflare DNS-over-HTTPS without requiring authorization from the target domain. It supports multiple transports including Streamable HTTP, native stdio, and legacy HTTP+SSE, making it compatible with Claude, Cursor, VS Code, and MCP clients.