intodns

CLI tool for DNS and email security scanning powered by IntoDNS.ai.

Checks DNS configuration, DNSSEC, SPF, DKIM, DMARC, and more — right from your terminal.

Installation

npm install -g intodns

Or run directly with npx:

npx intodns example.com

Usage

# Scan a domain
intodns example.com

# Alternative syntax
intodns scan example.com

# Get raw JSON output
intodns example.com --json

# Fail if score is below a threshold
intodns example.com --fail-below 80

# Disable colored output
intodns example.com --no-color

Example Output

IntoDNS.ai Scan Report
──────────────────────────────────────────────────
Domain:  example.com
Grade:   A
Score:   ████████████████████████████░░ 93/100

Categories
──────────────────────────────────────────────────
  DNS                   ████████████████████░ 100/100
  Email Security        ███████████████░░░░░░  75/100
  DNSSEC                ████████████████████░ 100/100

Issues (1)
──────────────────────────────────────────────────
  ▲ [MEDIUM] DMARC policy is not set to reject

Full report: https://intodns.ai/scan/example.com

CI/CD Integration

Use intodns in your CI pipeline to enforce DNS security standards.

GitHub Actions

name: DNS Security Check
on:
  schedule:
    - cron: '0 8 * * 1'  # Weekly on Monday
  workflow_dispatch:

jobs:
  dns-check:
    runs-on: ubuntu-latest
    steps:
      - name: Check DNS configuration
        run: npx intodns mysite.com --fail-below 70

GitLab CI

dns-security:
  image: node:20-alpine
  script:
    - npx intodns mysite.com --fail-below 70
  only:
    - schedules

Exit Codes

| Code | Meaning | |------|---------| | 0 | Grade A or B (or score above --fail-below threshold) | | 1 | Grade C, D, or F (or score below --fail-below threshold) | | 2 | Error (invalid domain, network error, etc.) |

Options

| Flag | Description | |------|-------------| | --json | Output raw JSON from the API | | --fail-below N | Exit with code 1 if score is below N (0-100) | | --no-color | Disable colored output | | --help | Show help | | --version | Show version |

Requirements

• Node.js 18 or higher (uses native fetch)

GitHub Action

You can also use the IntoDNS GitHub Action for automated CI/CD checks.

Links

• IntoDNS.ai — Full web-based DNS analysis
• GitHub — Source code
• Cobytes — Security solutions

License

MIT - Cobytes B.V.