---
title: "DNS Examiner"
description: "AI-powered DNS zone analysis. Check email deliverability, security, nameserver delegation, and best practices."
url: https://edge.network/docs/dns/examiner/
---

# DNS Examiner

DNS

# DNS Examiner

AI-powered zone analysis that checks your DNS configuration for issues across email, security, web, and nameserver delegation — then gives you specific fixes.

## Included with every account

DNS Examiner is available on all Edge DNS plans at no extra cost. Run examinations as often as you need.

## How to Use

- 1 Open a DNS zone and navigate to the **Examiner** tab
- 2 Click **Run Examination** — the analysis takes up to 30 seconds
- 3 Review your health score, issues, and recommendations. Fix issues directly in the **Records** tab.

## What It Checks

### Email Deliverability

Validates SPF, DKIM, and DMARC records. Checks MX configuration and flags missing or misconfigured email authentication.

### Security

Reviews CAA records, checks for overly permissive wildcards, and verifies security-related DNS configuration.

### Web Accessibility

Confirms A/AAAA records resolve, checks for CNAME-at-apex conflicts, and verifies www subdomain setup.

### Nameserver Delegation

Compares live NS lookups against your assigned Edge nameservers. Identifies delegation mismatches at your registrar.

### Best Practices

Audits TTL values, flags duplicate or conflicting records, checks MX priority spread, and identifies orphaned entries.

## Health Score

Each examination produces a health score from 0 to 100 based on the severity and number of issues found.

| Score | Rating | Meaning |
| 80–100 | Good health | No critical issues. Minor improvements may be suggested. |
| 60–79 | Needs attention | Some warnings that should be addressed. |
| 0–59 | Issues found | Critical issues that may affect email delivery, security, or availability. |

## Issue Severity

Issues are categorised by severity to help you prioritise fixes.

### Critical

Issues that directly impact functionality — missing SPF causing email rejection, nameserver delegation mismatch, etc.

### Warning

Potential problems that may cause issues — missing DMARC policy, no CAA record, suboptimal TTLs.

### Info

Suggestions for improvement — adding a www CNAME, optimising TTL values, etc.

## Saved Results

Examination results are saved automatically. When you return to the Examiner tab, your most recent result is displayed with the date and time it was run. Click **Re-run** at any time to get a fresh analysis.

## CLI

DNS Examiner is also available via the Edge CLI.

```
# Run an examination
edge dns examine <zone-id>

# View the last result
edge dns examine-last <zone-id>

# Output as JSON
edge dns examine <zone-id> --output json
```

[Backups](https://edge.network/docs/dns/backups) [test.network](https://edge.network/docs/dns/test-domains)
[Back to Docs](https://edge.network/docs) [Need help?](https://edge.network/support)