Operations | Monitoring | ITSM | DevOps | Cloud

When something goes wrong in a client’s infrastructure, MSPs are expected to fix it—fast. But there’s one area most teams still overlook, and it’s often the first point of failure: DNS. Misconfigured DNS doesn’t always break things immediately. It’s subtle. It lingers. And when it finally causes an outage, broken email, or a security issue, it’s often too late. Here are the DNS misconfigurations MSPs can’t afford to ignore—and what to do about them.

Most MSPs don’t think much about DNS—until something breaks. A record is deleted, an MX entry is misconfigured, or a zone is out of sync. Suddenly, your client’s email is bouncing, their site is down, and your phone is ringing. The problem? DNS issues are easy to miss. They don’t always trigger alerts, logs, or tickets. But when they surface, you’re the one your client calls first.

In January 2025, security researchers uncovered a critical DNS misconfiguration involving Mastercard. For nearly five years, one of Mastercard’s DNS records pointed to the incorrect domain "akam.ne" instead of the intended "akam.net." This error, caused by a simple typographical mistake, created a vulnerability that could have allowed malicious actors to intercept or redirect traffic.

We just shipped a feature that’s been high on our list: a full implementation of the public DNS scoring system in your dashboard.

A few days ago, ICANN issued a statement where they call upon everyone to implement DNSSEC across their DNS infrastructure.

Ever since the launch of our DNS scan, we’ve had the warning about mismatched NS records. Many users choose to ignore this, but there’s a pretty good reason we give a big warning whenever those records don’t line up. In this blogpost, we’ll show what can happen with misconfigured NS records.

It’s been a bit quiet on the DNS Spy front lately, hasn’t it? Well, today is about to change that. We’ve launched a big update to DNS Spy. Mostly behind the scenes improvement, but certainly a few things everyone can enjoy!

Why pay for a service if you have no idea if it’s even good? We get that. We feel the same. Heck, I wouldn’t pay for something without trying it. When we cancelled our free tier a few weeks ago, we heard 2 dominant pieces of feedback: the need for a smaller plan and the need to test the service, before committing. The first we addressed with the Light plan, starting at 4.99€/month. The second we fix today.

When we announced we were cancelling our free tier few a few weeks ago, we got a lot of replies. Both publicly and privately, and we’d like to thank you all for the kind & valuable feedback we’ve been given! One overwhelming theme was the request for a smaller DNS Spy plan, to monitor less sites, that doesn’t start at 9.99€/month.