DNSBuddy
Changelog

What we've shipped for DNS research and tooling

Every improvement to the free DNS tools, bulk operations, provider health data, identifier detection, and the platform behind them. Filter by type when you only want to see new tools or fixes.

2.2.0

July 10, 2026

Features

Frontend

  • CAA checker Added a dedicated CAA checker for reviewing which Certificate Authorities may issue TLS certificates for a domain.
  • DKIM checker Look up DKIM public key TXT records by domain and selector at selector._domainkey.{domain}.
  • DMARC checker Look up _dmarc TXT records for any domain to verify policy, reporting addresses, and alignment settings.
  • DNSSEC checker Added a DNSSEC checker that looks for DS, DNSKEY, and RRSIG records and summarizes whether chain evidence is present.
  • Docs and Knowledge Base replace Learning Documentation now lives under /docs: step-by-step Help center guides and a searchable Knowledge Base for DNS record references, email authentication, and WHOIS. The old Learning section is retired.
  • IP lookup (IP to ASN) Resolve IPv4 and IPv6 addresses to announcing ASN, organization, country, and route prefix.
  • MX lookup Dedicated MX record lookup page to see mail server priorities and hostnames from multiple DNS resolvers.

Improvements

Frontend

  • Made some minor design changes I have tweaked the look and feel for somethings, and some other stuff around here.

2.1.0

May 9, 2026

Features

Frontend

  • Bulk WHOIS lookup tool (beta) Run up to 256 mixed domains, IPv4/IPv6 addresses, and ASNs in one batch. Results are grouped by type with per-tab CSV export and normalized RDAP/WHOIS fields.
  • IPv4 subnet calculator Compute network and broadcast addresses, subnet and wildcard masks, usable host range, host counts, legacy IP class, and dotted-binary network/mask views from any IPv4 CIDR. Plain addresses default to /32; optional shareable ?cidr= query param.

2.0.0

February 25, 2026

Features

Frontend

  • DNS Health With all the different activity we see, I wanted to also monitor the DNS Health of the various providers. This will be important as I scale and start to build out my own DNS Hosts in the future.
  • Domain Digger This is similar to a tool we previously offered, but a lot better. We now identify over 100 different TXT Validation Records, 30 different MX and 50 different NS (DNS Providers). We are constantly enhancing our data, and trying to provide the best results around.
  • DNS History Beta We're excited to introduce the DNS History viewer: a new beta tool for exploring the detailed DNS and nameserver change history of any monitored domain. See a Git-like timeline of all past DNS record changes and track how your domain has evolved over time.
  • Feedback just got a whole lot better Previously we made you own up a GitHub issue and provide a template, now on every page you will see a little icon to provide us feedback. This gets instantly posted to our internal discord, and we will take it from there.
  • Learning hub is here! To help drive traffic and to help educate, I thought it would be a win win to build out some resources around various things around DNS.
  • Introducing the SPF Analyzer A brand new feature that helps you analyze, parse, and visualize SPF records—including their structure, DNS lookups, and granting relationships. Built for clarity, speed, and modern best practices.
  • Subdomain Finder Tool Introducing a new Subdomain Finder tool, providing asynchronous, scalable subdomain enumeration with live job status and results via API. Now supports polling for results, robust error handling, and Redis-backed storage for improved performance.

Improvements

Frontend

  • More reliable DNS lookups We have moved away from DoH (DNS over HTTPS) to using our own backend. Which allows us to easily parse, and handle the results better.
  • Expanding WHOIS lookup to be more reliable We implemented RDAP per RFC 7482. When RDAP is not available we fall back to the TLDs WHOIS server. We try to parse it, and are looking for feedback as you come across any issues. We also provide a quick easy way to download the results.
  • Increased Bulk FCrDNS capacity Prior we had a limit of 100, now it's 256. We can always increase, but for now we thought this increase is probably a good start.

Deprecations

Frontend

1.2.8

October 31, 2026

Fixes

API

  • Account deletion finishes Deleting an account removes old team memberships and inbox items, and it clears you as the creator of keys on teams that remain. If deletion canceled the subscription and then stopped, the next try restores that subscription or removes the team.
  • Audit visitor address Audit entries record the visitor address the rest of the app already trusts.
  • Billing webhook retry A billing webhook can be delivered again when the job was not queued.
  • Child team members A member who joins a parent team stays on the child team when a sync is already running.
  • Reuse a deleted account email You can sign up again with an email from an account that was deleted. Confirming an email change onto that address stops before your sessions are signed out.
  • Invite when billing is missing Accepting an invite tells you when team billing is not ready yet. A team that is full still refuses the invite.
  • Leave a team Leaving a team removes it from your team list right away.
  • Member update body The member update API rejects an empty body. Sending an empty note still clears the note.
  • Notification confirmation links Notification confirmation links use your public API address in production.
  • Seat counts The first paid period keeps the seat count already on the team, and a later period keeps the count from the period that just ended. A new paid team counts each member once.
  • Team invites An expired invite can be replaced or canceled. Invites match the mailbox regardless of letter case, and a canceled invite cannot still add a member.
  • Last team owner A team keeps an owner when two owners change roles at the same time.
  • Usage alerts A usage alert is sent when the threshold is crossed.

Security

API

  • API key roll Rolling an API key drops the previous key before the new secret is shown. A failed roll can be retried without leaving the old key active.
  • Profile save Saving your name and emoji leaves the password that is already stored.
  • Other sessions sign out first Changing a password, resetting a password, or deleting an account signs other sessions out before the change is saved. A reset link is used once with the new password, and the account stays if that sign-out fails.
  • Webhook addresses Webhook delivery rejects shared carrier addresses and local IPv6 ranges along with private networks.

Frontend

  • Error reports omit reset links Error reports mask page text and drop the token from password-reset and email-confirmation links.
  • Sign-in redirect stays on this site A redirect after sign-in stays on this site when the path hides another address with a tab or a line break.

1.2.7

October 30, 2026

Fixes

API

  • Account deletion keeps the subscription Deleting an account no longer cancels the team subscription when another member has joined and the team stays.
  • Child teams follow the parent Removing someone from a parent team removes them from child teams that copy members. A role or note change on the parent shows up on those child teams.
  • Deleting a child team frees a slot Deleting a child team frees that slot on the parent plan, so you can create another child team afterward.
  • Member notes can be cleared Clearing a member note and saving now removes the note.
  • Cloudflare client IP Rate limits and staff access trust a Cloudflare visitor header only when the connection came from Cloudflare.
  • Email change confirmation Changing your email asks for your current password, replaces any older confirmation link, and signs out other sessions after the new address is confirmed.
  • Invite emails name the team A team invite email includes the team name. The email is sent only after the invite is saved.
  • Notification email confirmation The confirmation email for a notification address opens a link that verifies the channel.
  • Notification rule channels A notification rule delivers only to channels and members that belong to the same team.
  • One address, one account Sign-in, sign-up, and email changes treat an address as the same mailbox regardless of letter case, so one inbox cannot open two accounts.
  • Previous billing period Previous period on the usage page shows the billing period that ended when the current one started, including yearly plans and periods that begin on the 31st.
  • Production email delivery Password resets, invites, and other mail are sent on Fly and Railway when debug mode is off. Development environments still skip delivery.
  • Production webhook addresses Production rejects private and non-HTTPS webhook addresses, including when the environment name is blank, prod, or mixed case.
  • Recovery codes are single-use A recovery code can sign you in once. A second attempt with the same code is rejected, including when two sign-ins overlap.
  • Redis connection URL A rediss:// URL turns TLS on, and a redis:// URL leaves it off. A database URL applies its sslmode the same way.
  • Removed members can rejoin You can add someone again after you remove them from a team, and you can send a new invite after you cancel the previous one.
  • Seat counts on renewal Team and Enterprise renewals keep the current seat count. Enterprise renewals keep the current child team count.
  • Revoked API keys Revoking an API key stops it right away. A request already in progress cannot turn that key back on.
  • Seat count matches the member list Removing a member, leaving a team, or deleting an account no longer drops the membership when the seat count cannot be updated.
  • Webhook delivery address Webhook delivery connects to the address that was checked for that send.
  • Webhook redirects A webhook that responds with a redirect stays undelivered and is retried.
  • Webhook address changes Changing a webhook URL marks the channel unverified until a test send to the new address succeeds.

Frontend

  • Email confirmation after sign-in Opening a change-email link while signed out takes you back to that confirmation after you sign in.
  • Inbox unread list The notification bell lists unread items and can load the next page when more unread notifications remain.
  • Stay signed in through a network error A failed connection while refreshing your session keeps you signed in. The app signs you out only when the session itself is no longer valid.
  • Two-factor sign-in The authenticator and recovery-code tabs no longer send both codes at once, so a leftover authenticator code does not block a recovery code.
  • Zero limits on the usage page A feature with a limit of zero shows none remaining on the usage page. A feature with no limit shows as unlimited.