Frequently Asked Questions

DomainDetective is a comprehensive domain analysis toolkit that performs 115+ protocol checks covering email authentication, DNS security, TLS, HTTP security, threat intelligence, and subdomain discovery. It is available as a C# library, PowerShell module, CLI tool, and online web tools.

Yes. DNS-heavy checks run browser-side via DNS-over-HTTPS, and advanced HTTP/TLS checks use the hosted DomainDetective analysis API when the browser cannot inspect them directly. We do not store domain data, query results, or analysis output.

DomainDetective covers SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNS records (A, AAAA, MX, NS, SOA, TXT, CNAME, CAA), DNSSEC validation, TLS certificate analysis, DANE/TLSA, HTTP security headers, security.txt, DNSBL, RDAP/WHOIS, dangling CNAME detection, and Certificate Transparency subdomain discovery.

Absolutely. DomainDetective is available as a NuGet package for .NET applications and as a PowerShell module from the PowerShell Gallery. Install it with dotnet add package DomainDetective or Install-Module DomainDetective.

Yes. DomainDetective is open source under the MIT license. You can use it freely in personal and commercial projects, inspect the source code, and contribute improvements on GitHub.

You can configure custom DNS resolvers using DomainHealthCheckConfiguration. By default, DomainDetective uses public resolvers such as Cloudflare, Google, and Quad9. See the configuration docs for details.

Yes. The C# library and CLI tool run on any platform supported by .NET 8+ and .NET 10. The PowerShell module works on both Windows PowerShell 5.1 and PowerShell 7.0+.

The online tools use DNS-over-HTTPS (DoH) to query DNS records directly from your browser whenever the web platform allows it. For checks that require direct TLS inspection or unrestricted HTTP probing, the hosted analysis API performs the request server-side and returns the result to the browser.