---
title: DNS Health Checker: a DNS grade on its own page
description: The DNS health grade lived below the propagation map, so "is my DNS set up well?" meant opening a tool built for a different question. The new DNS Health…
canonical: https://watchfor.io/changelog/2026-10-05-dns-health-checker
---

[All updates](/changelog#2026-10-05-dns-health-checker) ✨ New Oct 5, 2026 · v 9.5.8

# DNS Health Checker: a DNS grade on its own page

The DNS health grade lived below the propagation map, so "is my DNS set up well?" meant opening a tool built for a different question. The new DNS Health Checker leads with the A+ to F grade and the fix for every finding, then nameservers, SOA, DNSSEC and CAA, with what every probe location answers as the evidence. Same check and limits as DNS Propagation. Domains on two DNS providers are no longer graded down for SOA serials that differ between providers.

## What's new

- [DNS Health Checker](/dns-health-checker): type a domain, or pick one of the examples, and get the grade, the findings with their fixes, every nameserver asked directly, and the zone's SOA, DNSSEC and CAA. The per-location table and world map follow below.

- [DNS Propagation Checker](/dns-propagation-checker): unchanged, with a link from its grade to the full health check.

## Fairer for two providers

Running two DNS providers side by side is good practice, and each one numbers the zone its own way. Different SOA serials between providers are now shown as a note instead of capping the grade at B. Serials that differ inside one provider still do. Rules version dns-2026.10b , on [/grades](/grades#dns-health).

## Fixed

- For a zone without DNSSEC, the DNSSEC lookup could fail on our side and the result said "we could not confirm it validates" without lowering the grade. It now reads the answer in full, so a zone without DNSSEC is graded A at most, as the rubric says.

Share this update

---

Canonical page: https://watchfor.io/changelog/2026-10-05-dns-health-checker · Site guide: https://watchfor.io/llms.txt