Skip to content
SPECIFICTION
Get listed

DNSViz

dnsviz.net

Free plan WebmacOSLinuxAPISelf-hosted
Visit dnsviz.net
Spec score 8.7 #5 of 37 in Network Diagnostic Software

What it is

DNSViz is a free, open-source tool for visualizing DNS zone status and investigating DNSSEC deployment. It lays out a domain's authentication chain and resolution path, and identifies configuration errors. The graph can show delegations, record sets, negative responses, DNSKEY and DS records, signatures, wildcards, warnings and errors. It classifies DNS data as secure, bogus or insecure according to whether a trust chain reaches an anchor. The web service can run new analyses, but its maintenance mode means historical analyses cannot be loaded and new results cannot be saved to its database. For command-line use, the suite includes tools to query DNS, assess results and produce graph or text output. Queries use recursive resolvers by default, or authoritative servers when requested; graph output can be an image, DOT graph or HTML file. DNSViz documents installation on Linux, macOS and FreeBSD, among other Python-supported environments, and provides a Docker container. It is intended for understanding and troubleshooting DNSSEC, including pre-deployment checks of proposed zone and delegation changes.

Spec sheet

Purpose
DNSViz visualizes DNS zone status to help understand and troubleshoot DNSSEC deployment.Read 3 Oct 2026 · dnsviz.net
Intended users
The project describes DNSViz as a resource for understanding and troubleshooting DNSSEC deployment.Read 2 Oct 2026 · dnsviz.net
Support
The website invites users to submit questions, comments, and feedback.Read 3 Oct 2026 · dnsviz.net
Analysis
It visually analyzes a domain’s DNSSEC authentication chain and resolution path, and lists detected configuration errors.Read 3 Oct 2026 · dnsviz.net
Analysis inputs
The probe command accepts one or more domain names and queries recursive resolvers by default or authoritative servers when requested, serializing results as JSON.Read 2 Oct 2026 · github.com
Command line
The command-line tool provides probe, grok, graph, print, and query subcommands.Read 3 Oct 2026 · github.com
Container
A ready-to-use Docker container is available as dnsviz/dnsviz.Read 3 Oct 2026 · github.com
Dependencies
The documented dependencies include Python, dnspython, pygraphviz, and cryptography.Read 3 Oct 2026 · github.com
DNSSEC graph
Its visualization covers zones, delegations, resource record sets, negative responses, DNSKEY and DS records, NSEC/NSEC3, signatures, CDNSKEY/CDS, wildcards, node status, warnings, and errors.Read 2 Oct 2026 · dnsviz.net
Install platforms
The project documents packages for Debian, Ubuntu, Fedora, Gentoo, FreeBSD, RHEL and CentOS, plus Mac installation through Homebrew or MacPorts.Read 3 Oct 2026 · github.com
Installation
The project README lists installation through package repositories including Debian, Ubuntu, Fedora, Gentoo, FreeBSD, and EPEL for specified RHEL and CentOS versions, as well as macOS through Homebrew or MacPorts.Read 2 Oct 2026 · github.com
Maintenance status
The web service is in maintenance mode and cannot access its back-end database, load historical analyses, or save new analyses there.Read 3 Oct 2026 · dnsviz.net
Open source
The DNSViz source repository identifies its license as GPL-2.0.Read 3 Oct 2026 · github.com
Optional DNSSEC support
GOST DNSSEC algorithm and digest support requires the OpenSSL GOST Engine and M2Crypto.Read 3 Oct 2026 · github.com
Output formats
The graph command can output an image, a dot file, or an HTML file, including interactive HTML.Read 3 Oct 2026 · github.com
Pre-deployment testing
DNSViz documents pre-deployment testing for zones and proposed delegation, glue, and DS record changes.Read 3 Oct 2026 · github.com
Query sources
The probe command can query recursive DNS servers by default or authoritative DNS servers.Read 3 Oct 2026 · github.com
Security and compliance
The opened DNSViz pages describe DNSSEC analysis and verification features but make no security certification or compliance claim.Read 2 Oct 2026 · dnsviz.net
Trust anchor
The web visualization uses the root zone KSK as its default exclusive trust anchor, and users can configure arbitrary DNSKEY trust anchors in the options field.Read 2 Oct 2026 · dnsviz.net
Validation status
The graph classifies DNS data as secure, bogus, or insecure based on whether a chain of trust exists from a trust anchor.Read 2 Oct 2026 · dnsviz.net

Plans and prices

DNSViz Free No pricing or plan details stated; web analysis cannot load historical results or save new ones Read 3 Oct 2026 · dnsviz.net

Every DNSViz plan and price →

Strong points and limits

Strong points

  • Visualizes DNSSEC authentication chains and resolution paths.
  • Flags detected configuration errors.
  • Can query recursive or authoritative DNS servers.
  • Graph output includes image, DOT and HTML formats.
  • Documents Docker and multiple installation routes.

Limits

  • Cannot load historical web analyses.
  • Cannot save new analyses to its database.
  • GOST DNSSEC support requires additional components.
  • Command-line installation has listed dependencies.

Who it suits

DNSViz suits people who need to understand or troubleshoot DNSSEC, including those checking proposed zone or delegation changes before deployment. It offers both web analysis and command-line workflows.

Verdict

DNSViz provides both visual DNSSEC analysis and command-line tools, with output options for different workflows. The maintenance-mode web service cannot retrieve historical results or save new ones, so users should account for that limit.

Where Specifiction places it

Alternatives to DNSVizAll alternatives →