Hall of Fame

Domains that score 100% on DNS, mail or web security. Hold all three badges to become a champion.

What each badge needs
  •   DNS
  •   Email
  •   Website

Listed domains

Loading the list

Domain Badges Overall score Re-checked Listed

Loading the list
Showing 0 to 0 of 0

How a domain gets listed

Score 100% in a badge's checks and the domain is added the moment the scan finishes. Listed domains are scanned again at least every 30 days. A domain that stops passing loses the badge, and leaves the list when it holds none.

DNS badge

  • DNSSEC: the zone is signed and validates
  • RPKI: route origin authorisation for your nameservers
  • DANE: TLSA records on your nameserver delegation
  • Registration: registrar transfer lock, and RDAP agrees with DNS on DNSSEC

Email badge

  • Email security: SPF, DKIM and DMARC all in place
  • DANE: TLSA records for your mail servers
  • MTA-STS: an enforced policy for inbound mail TLS
  • RPKI: route origin authorisation for your mail servers

Needs a working mail server. Domains without one can't earn it.

Website badge

  • Web security: a valid TLS certificate and the right security headers
  • CAA: certificate issuance limited to the CAs you chose
  • security.txt: a valid disclosure contact at /.well-known/

Already close? A scan shows exactly which checks stand between you and a badge.

Scan your domain