---
title: "ZoneAudit - Domain and DNS exposure review"
description: "ZoneAudit reviews an organisation's domains, DNS records, certificates and email authentication, and sends a clear action on what needs attention and when."
canonical_url: "https://zoneaudit.com/en-gb"
---

> Index of every page on this site: [llms.txt](https://zoneaudit.com/llms.txt)

<organisms-section-hero :content="{"background":{"image":{"url":"https://static.cdn.cobrasphere.com/assets/images/bg/CobraSphere-Digital-Universe-Dark-Background.jpg","alt":"Abstract digital background"},"dark":{"image":{"url":"https://static.cdn.cobrasphere.com/assets/images/bg/CobraSphere-Digital-Universe-Dark-Background.jpg","alt":"Abstract digital background"}},"light":{"image":{"url":"https://static.cdn.cobrasphere.com/assets/images/bg/CobraSphere-Digital-Universe-Dark-Background.jpg","alt":"Abstract digital background"}}},"title":{"line1":"Know which\ndomain risks\nneed action today","line2":""},"content":[{"paragraph":"ZoneAudit™ checks your domains, DNS records, certificates and email authentication."},{"paragraph":"Every finding gets a deadline: act now, act by the next business day, or leave it for the next scheduled review."},{"paragraph":"Each one goes by email to the people who own the decision. Microsoft Teams and Slack are in early access."}],"note":"Teams and Slack delivery and continuous watching are on the roadmap. They are marked \"Early access\" where they appear further down.","buttons":[{"id":"hero-request-access","label":"Request access","to":"/#request-access","anchor":"request-access","type":"primary"},{"id":"book-level0","label":"Check your Level 0 readiness","to":"/level0","type":"secondary"}],"media":false,"alignment":"left","layout":"split","forceDark":true}">
<template v-slot:visual="">
<molecules-hero-composition>



</molecules-hero-composition>
</template>
</organisms-section-hero>

<organisms-brand-section-flex-layout :content="{"id":"leaders","aside":{"title":"What leadership receives","text":"ZoneAudit is designed for decision-makers. Each finding arrives as a short action with an owner and a date, and progress is reported monthly. It is designed for large, decentralised DNS estates and sends only what needs a decision."},"items":[{"eyebrow":"Written to read in 3 seconds","title":"The action","description":"One sentence that states the exposure and the action required, classified as act now, next business day or next review."},{"eyebrow":"1 owner per action","title":"An owner for every action","description":"Each action has a named owner and a date. A later scan confirms when it has been resolved."},{"eyebrow":"12 reports a year","title":"A monthly before-and-after","description":"A one-page record for the board of what was exposed, what was resolved and what remains."},{"eyebrow":"Every business unit","title":"An executive view across business units","badge":"Coming later","description":"Domain exposure, decisions and progress across every business unit, for leadership."}]}" :settings="{"layout":"left-aside","itemColumns":2,"backgroundColor":"bg-surface"}">



</organisms-brand-section-flex-layout>

<organisms-brand-section-flex-layout :content="{"id":"how","aside":{"title":"How it works","text":"Every review follows the same sequence: scan, classify, follow through."},"items":[{"eyebrow":"STEP 1","title":"Scan","description":"ZoneAudit maps the subdomains, DNS records, certificates and email authentication it finds across the organisation's domains, including legacy registrations."},{"eyebrow":"STEP 2","title":"Classify","description":"Findings are validated and ranked, then issued with a clear action and owner."},{"eyebrow":"STEP 3","title":"Follow through","description":"Actions are tracked to completion. A later scan confirms each resolution and records the change."}]}" :settings="{"layout":"left-aside","itemColumns":3,"itemStyle":"card","backgroundColor":"bg-surface-alt"}">



</organisms-brand-section-flex-layout>

<organisms-brand-section-grid :content="{"id":"watch","title":"What ZoneAudit reviews","text":"The review covers records and services that sit outside day-to-day change control.","paragraphs":["Forgotten subdomains, misconfigured records and expired services are easy to miss, because nobody changes them day to day.","From audit preparation to routine review, ZoneAudit shows what exists, where it points and what no longer belongs."],"items":[{"icon":"i-lucide-search","title":"Where your domains point","description":"The records we find for your domains, checked against what should be there.","technical":"DNS records (A, AAAA, CNAME, MX, NS, TXT, SOA) and nameserver delegation from the parent zone. Public DNS does not list every record, so the review covers the names it can discover and the names you give it."},{"icon":"i-lucide-mail","title":"Who can send mail as you","description":"Gaps that let others send mail that appears to come from your domain.","technical":"Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) and DMARC records, checked for presence, syntax and policy (none, quarantine or reject)."},{"icon":"i-lucide-shield-check","title":"Certificates","description":"Expiry dates and set-up on the sites we find serving traffic.","technical":"Transport Layer Security (TLS) certificates, checked for expiry date, issuer, name match and certificate chain."},{"icon":"i-lucide-link-2-off","title":"Forgotten subdomains","description":"Addresses still pointing at services that no longer exist.","technical":"Dangling CNAME, A and AAAA records that point at retired hosts or cloud services. Someone else could claim the service and take over the address (subdomain takeover)."},{"icon":"i-lucide-scan-eye","title":"Exposure from the outside","description":"What your domains show to anyone on the internet.","technical":"Public DNS answers, registration data from the Registration Data Access Protocol (RDAP) and HTTP responses, as an outside party sees them."},{"icon":"i-lucide-network","title":"Domain sprawl","description":"Overlapping domains and zones that nobody manages.","technical":"Registrations and zones compared by registrar, nameservers and RDAP registration data, to find domains outside known ownership."},{"icon":"i-lucide-server","title":"Changes to who controls your domains","badge":"Early access","description":"Unexpected changes to where your domains are registered or served from.","technical":"Nameserver (NS) delegation, registrar and registration status from RDAP, compared between scans."},{"icon":"i-lucide-refresh-cw","title":"Change detection","badge":"Early access","description":"Each scan compared with the one before, reporting what has changed.","technical":"Record-level differences between consecutive scan results."}]}" :settings="{"columns":4,"backgroundColor":"bg-surface"}">



</organisms-brand-section-grid>

<organisms-section-teaser :content="{"id":"fix","eyebrow":"","title":"Proposed changes, applied on approval","badge":"Early access","paragraphs":["Where a finding has a defined remediation, such as a missing DMARC record or an obsolete CNAME, ZoneAudit drafts the exact change and says what it averts.","Changes are applied only after approval by an authorised person, and are confirmed on the next scan."],"html":"<p>Where a finding has a defined remediation, such as a missing DMARC record or an obsolete CNAME, ZoneAudit drafts the exact change and says what it averts.</p><p>Changes are applied only after approval by an authorised person, and are confirmed on the next scan.</p>"}" :settings="{"layout":"default","mediaPosition":"right","textColorMode":"dark","backgroundColor":"bg-surface-alt"}">
<template v-slot:visual="">
<molecules-diff-card>



</molecules-diff-card>
</template>
</organisms-section-teaser>

<organisms-section-teaser :content="{"id":"evidence","eyebrow":"","title":"Evidence on request","html":"<p>Each scan, action and approval is recorded with its date and approver.</p><p>The evidence pack presents this as a single document for auditors, insurers and customers: each finding in plain English, with its owner and date.</p>"}" :settings="{"layout":"default","mediaPosition":"left","textColorMode":"dark","backgroundColor":"bg-surface"}">
<template v-slot:visual="">
<molecules-evidence-pack>



</molecules-evidence-pack>
</template>
</organisms-section-teaser>

<organisms-brand-section-ribbon :content="{"title":"Need proof for an auditor or insurer?","text":"The evidence pack can be exported whenever it is asked for.","buttons":[{"id":"sample-evidence-pack","label":"See a sample evidence pack","to":"/sample-evidence-pack","variant":"solid"}]}" :settings="{"variant":"feature"}">



</organisms-brand-section-ribbon>

<organisms-section-cta :content="{"id":"level0","eyebrow":"Defence supply chain","title":"Defence Level 0 readiness","paragraphs":["The Ministry of Defence has asked defence suppliers to reach Level 0 of its Defence Cyber Certification by 31 December 2026 (MOD Defence Digital blog, July 2026). The ZoneAudit review covers the internet-facing domain part of that work and sets out what is outstanding."],"countdown":{"label":"days to 31 December 2026","targetDate":"2026-12-31"},"blocks":[{"id":"block-level0-review","title":"Level 0 review","paragraphs":["A review of your internet-facing domains for your Level 0 work, with a dated report for your customer."],"buttons":[{"id":"block-level0-button","label":"Check your Level 0 readiness","to":"/level0","variant":"solid"}]},{"id":"block-snapshot","title":"Insider readiness snapshot","paragraphs":["Your company's own snapshot of its domains, opened with the access code we send once your request for access is approved."],"buttons":[{"id":"block-snapshot-button","label":"Enter your access code","to":"/access?tab=code","variant":"outline"}]}]}" :settings="{"layout":"default","backgroundVariant":"navy-gradient","textColorMode":"light","cardAccent":true}">



</organisms-section-cta>

<organisms-section-teaser :content="{"id":"cli","eyebrow":"For technical teams","title":"The open-source Community Edition","html":"<p>ZoneAudit Community Edition is an open-source command-line interface (CLI), released under the MIT licence. The current release, 0.2.0, runs DNS, TLS, Registration Data Access Protocol (RDAP) and HTTP checks against a single domain, on your own computer.</p><p>It gives the raw findings as text or JSON. The actions, owners and evidence pack are part of the full ZoneAudit service.</p>"}" :settings="{"layout":"default","mediaPosition":"right","verticalAlignment":"bottom","textColorMode":"dark","backgroundColor":"bg-surface"}">
<template v-slot:visual="">
<molecules-terminal-window>



</molecules-terminal-window>
</template>

<template v-slot:below="">
<molecules-cli-install-tabs>



</molecules-cli-install-tabs>
</template>
</organisms-section-teaser>

<organisms-brand-section-industries :content="{"id":"who","title":"Designed for demanding environments","paragraphs":["ZoneAudit supports organisations where domain infrastructure carries safety, compliance or contractual weight."],"items":[{"title":"Engineering","description":"Distributed sites and legacy domains under one review.","image":{"url":"/images/industries/engineering.jpg","alt":"Engineers in hard hats watching a large engine on a test stand"}},{"title":"Manufacturing","description":"Operational and corporate domains assessed together.","image":{"url":"/images/industries/manufacturing.jpg","alt":"A machinist clamping a part in a milling machine vice"}},{"title":"Automotive","description":"Supplier and dealer subdomains brought into view.","image":{"url":"/images/industries/automotive.jpg","alt":"Car bodies moving along a vehicle assembly line"}},{"title":"Aviation","description":"Exposure recorded in a form that can be evidenced.","image":{"url":"/images/industries/aviation.jpg","alt":"A jet airliner framed by the open doors of a hangar"}},{"title":"Defence supply chain","description":"Readiness for Level 0 and contractual cyber requirements.","image":{"url":"/images/industries/defence.jpg","alt":"A submarine hull under construction in a shipyard hall"}},{"title":"Agriculture and robotics","description":"Connected machines and supplier domains, reviewed from the outside.","image":{"url":"/images/industries/agriculture-robotics.jpg","alt":"An autonomous vineyard robot working between rows of young vines"}}]}" :settings="{"backgroundColor":"bg-surface-alt"}">



</organisms-brand-section-industries>

<organisms-section-request-access :campaign="{"id":"zoneaudit-earlyaccess","name":"ZoneAudit early access"}" :content="{"id":"request-access","title":"Request access","paragraphs":["Tell us your company, domain and role, and confirm your work email with a one-time code.","Each request is reviewed by a person. Approved companies receive an access code that opens their own ZoneAudit snapshot. If it is not yet possible, we say so."],"gating":"Access is by request. ZoneAudit shows where an organisation is exposed, so we confirm you represent the domains before anything is shown."}" :settings="{"backgroundColor":"bg-surface"}">



</organisms-section-request-access>

<organisms-brand-evidence-strip :content="{"id":"supports-evidence","label":"Supports evidence for","items":[{"id":"CYBER_ESSENTIALS","name":"Cyber Essentials","contribution":"evidence for the secure configuration control, with a dated record of what your domains expose to the internet."},{"id":"ISO_IEC_27001","name":"ISO/IEC 27001","contribution":"evidence for the asset inventory control (Annex A 5.9), with a dated list of your domains, subdomains and certificates and an owner for each action."},{"id":"MOD_DCC_LEVEL_0","name":"MOD DCC Level 0","contribution":"evidence of a dated review of your internet-facing domains, to support your Level 0 submission."},{"id":"NCSC_CAF","name":"NCSC CAF","contribution":"evidence for asset management (principle A3), from a dated inventory of your domains and DNS records."},{"id":"NIS2","name":"NIS2","contribution":"evidence for the asset management and vulnerability handling measures in Article 21, as they apply to your domains."},{"id":"DORA","name":"DORA","contribution":"evidence for identifying ICT assets under Article 8, covering your domains, DNS records and certificates."}]}" :settings="{"backgroundColor":"bg-surface-alt"}">



</organisms-brand-evidence-strip>

<organisms-brand-section-faq :content="{"id":"faq","title":"Questions and answers","text":"Short answers to the questions people ask before they request access.","items":[{"id":"WHAT_IS_ZONEAUDIT","question":"What is ZoneAudit?","answer":"It reviews your domains from the outside and turns what it finds into a short list of actions, each with an owner and a date."},{"id":"WHO_IS_IT_FOR","question":"Who is it for?","answer":"Organisations with spread-out domain estates, and suppliers whose customers expect evidence."},{"id":"WHY_REQUEST_ACCESS","question":"Why do I have to request access?","answer":"ZoneAudit shows where an organisation is exposed, so we confirm you represent the domains before showing anything."},{"id":"AFTER_REQUEST","question":"What happens after I request access?","answer":"We verify your work email, a person checks your company, domain and role, and we reply within 24 hours. Approved companies get an access code."},{"id":"CHANGES_SYSTEMS","question":"Does ZoneAudit change anything on our systems?","answer":"No. It only reads what's publicly visible."},{"id":"PASSWORDS_ACCESS","question":"Do you need passwords or access to our systems?","answer":"No, not for the outside view. Any changes are proposed first and only applied with your approval."},{"id":"WHAT_IT_CHECKS","question":"What does it check?","answer":"Where your domains point, who can send mail as you, certificates and their expiry, records pointing to retired services, and changes to who controls your domains."},{"id":"LEVEL0_CE_ISO","question":"How does it relate to Level 0, Cyber Essentials and ISO 27001?","answer":"It provides evidence for parts of them, but doesn't certify. For Level 0 it covers only the internet-facing domain part."},{"id":"DATA_HELD","question":"Where is our data held, and for how long?","answer":"Held in the UK and Germany. Kept for as long as your access is active, plus 12 months, then deleted."},{"id":"EVIDENCE_PACK","question":"What's in the evidence pack?","answer":"A dated record of what was found, fixed, by whom and when.","link":{"label":"See a sample evidence pack","to":"/sample-evidence-pack"}},{"id":"SELF_CHECK_CLI_SERVICE","question":"What's the difference between the self-check, the Community Edition CLI and the full service?","answer":"An instant first look, an open-source CLI for technical teams, or the complete service with the evidence pack."},{"id":"DOMAIN_NOT_OWNED","question":"What if I check a domain we don't own?","answer":"You see only a general result. The details go to verified owners only."}]}" :settings="{"backgroundColor":"bg-surface"}">



</organisms-brand-section-faq>

<organisms-brand-closing-band :content="{"blocks":[{"id":"band-leaders","title":"For leaders","buttons":[{"id":"band-leaders-button","label":"Check your Level 0 readiness","to":"/level0","variant":"outline"}]},{"id":"band-access","title":"Access by request","buttons":[{"id":"band-access-button","label":"Request access","to":"/#request-access","anchor":"request-access","variant":"solid"}]},{"id":"band-cli","title":"For technical teams","buttons":[{"id":"band-cli-button","label":"Get the CLI","to":"/#cli","anchor":"cli","variant":"outline"}]}]}">



</organisms-brand-closing-band>

## Sitemap

See the full [sitemap](https://zoneaudit.com/sitemap.md) for all pages.