About DNS Doctor
What this service is, how it generates the records it recommends, and how to reach the company behind it.
A scanner first, a monitor after
DNS Doctor checks a domain's email authentication and DNS health: SPF, DKIM, DMARC, MX, DNS hygiene, blacklist status, and domain and SSL certificate expiry. The scan is free and requires no signup.
The paid Monitor plan watches verified domains continuously: scheduled re-scans, DMARC aggregate (RUA) report ingestion, enforcement readiness, and email alerts when something changes. Plans and limits are listed on the pricing page.
The engine writes records. The AI never does.
Every record DNS Doctor recommends is generated and validated by a deterministic engine that follows the published RFC grammar, including the SPF limit of 10 DNS lookups. The AI layer writes only the plain-English explanation of each finding.
This split exists because SPF and DMARC errors fail silently: a wrong record still parses as a valid one, and mail quietly stops authenticating. A language model that guesses a record can be confidently wrong in exactly that invisible way, so it is never allowed to write one here.
Nothing is applied automatically. Every record is presented for a human to review and apply at their DNS provider. The full accounting behind each verdict is on the methodology page.
Independent and subscription-funded
DNS Doctor is an independent software company. It launched in 2026 and is funded by its subscriptions, not by advertising or by reselling data.
The agent-facing pieces are open source: the Claude Code plugin, the OpenClaw plugin, and the thin MCP client are published on GitHub under the dnsdoctor organization, which is domain-verified against dnsdoctor.dev.
Support, security reports, and everything else: [email protected].