What it does
DNSViz draws DNS-zone resolution and DNSSEC authentication relationships and lists detected configuration errors.
Use DNSViz’s web view to follow a domain’s DNSSEC authentication chain and resolution path, with detected errors attached to the analysis. Its command-line tools expose a reusable workflow: probe collects DNS responses as JSON, grok assesses that data, and graph renders an image or interactive HTML. Probe can use configured recursive resolvers or query authoritative servers directly, so record which mode produced the evidence. Local installation needs the documented Python, DNS, cryptography and graph dependencies; zone-file pre-deployment tests additionally invoke BIND. The GPLv2 suite powers the public site. It diagnoses observed DNS behavior, not the availability of an entire website or application.
Strengths
- Visual DNSSEC authentication chains
- Configuration errors linked to DNS analysis
Best for
- Understanding a DNSSEC validation problem
Sources
- DNSViz | A DNS visualization tool (Oct 26, 2026)
- DNSViz Official Repository (Oct 26, 2026)