Features Records How It Works Pricing FAQ Start Querying
Backed by mandล

Every domain.
Every record. Resolved.

Resolver is the category-defining DNS intelligence platform. Query any record type, trace resolution paths, and visualize your entire domain infrastructure โ€” with zero blind spots.

9 Record types supported
<12ms Avg. resolution time
100% Delegation traced
resolver โ€” dns query
$ โ–Š
Core Platform

DNS intelligence built from first principles

We didn't just wrap a command โ€” we rearchitected DNS lookup for the modern stack. Every capability maps to a real workflow.

๐ŸŽฏ

Record Type Engine

Query any DNS record โ€” A, AAAA, MX, NS, TXT, CNAME, SOA, PTR, SRV โ€” with a single unified interface using -t TYPE.

โšก

Short Mode

Cut the noise. Enable +short for machine-parseable, minimal output. Perfect for scripts, pipelines, and automated monitoring workflows.

๐ŸŒ

Full Trace

Follow every delegation hop from root nameservers to authoritative answer with +trace. Complete visibility into the DNS resolution chain.

๐Ÿ”’

DNSSEC Validation

Verify cryptographic trust chains with +dnssec. Authenticate every response and detect MITM tampering before it becomes a breach.

๐Ÿ”„

Reverse Lookup

Map any IP back to its hostname with -x. Instant PTR record resolution for forensics, auditing, and incident response.

๐Ÿ“ก

Server Targeting

Bypass local config and query specific nameservers with @server. Compare responses across resolvers โ€” Google, Cloudflare, custom infra.

๐Ÿ”Œ

TCP Transport

Force TCP connections with +tcp for large responses, zone transfers, and firewalled environments. No packet truncation, ever.

๐Ÿ“Š

Answer Precision

Surgical output control with +noall +answer. Strip headers, authority, and additional sections โ€” deliver only the records that matter.

๐Ÿ“ˆ

Query Statistics

Measure resolution performance with +stats. Query time, server used, message size, EDNS info โ€” every metric you need for SLA tracking.

Record Explorer

Every record type, decoded

Interactive reference for every DNS record Resolver supports. Click a type to explore.

example query
Resolution Waterfall

Trace every hop in the delegation chain

Watch a +trace query resolve in real time โ€” from root nameservers to authoritative answer.

Root (.) a.root-servers.net
TLD (.com) a.gtld-servers.net
Authoritative ns1.example.com
Answer 93.184.216.34
Root query
4ms
TLD referral
8ms
Auth query
12ms
Total
24ms
Query Builder

Compose queries visually

Build complex DNS queries with an interactive interface. Toggle flags, choose types, and see the command in real time.

generated command
$ dig example.com A
How It Works

From query to answer in three steps

Resolver wraps decades of DNS protocol knowledge into a frictionless developer workflow.

01

Compose

Specify your target domain, record type, and flags. Use @server to route through any resolver. Build queries visually or from the CLI.

02

Resolve

Resolver traverses the DNS hierarchy โ€” root, TLD, authoritative โ€” collecting answers, authority, and additional records at every level of delegation.

03

Analyze

Inspect results, timing data, DNSSEC validation status, and response codes. Export in any format. Integrate with your monitoring pipeline.

Advanced Modes

Power features for every scenario

Batch Mode

Queue thousands of queries from a file. Resolver processes them sequentially, outputting results in order. Perfect for bulk domain audits and migration validation.

resolver -f domains.txt +short

Recursion Control

Toggle recursive resolution with +recurse and +norecurse. Test authoritative-only responses or debug resolver behavior at each level.

resolver example.com +norecurse

Section Filters

Expose or hide individual response sections โ€” +authority, +additional, +comments. Surgical precision over what you see.

resolver +noall +answer +authority

.digrc Config

Set persistent default flags in ~/.digrc. Apply +short, +stats, or custom server preferences globally โ€” zero repetition.

echo "+short" > ~/.digrc

Class Selection

Query across DNS classes with -c CLASS. Support for IN (Internet), CH (Chaos), and HS (Hesiod) class records for advanced diagnostics.

resolver -c CH version.bind TXT

Reverse DNS

Instantly resolve any IP to its hostname with -x. Automatic in-addr.arpa construction. Essential for security forensics and log enrichment.

resolver -x 8.8.8.8
Pricing

Resolution at every scale

From solo developers to enterprise SOCs. Every plan includes unlimited record types.

Lookup
$0
free forever
  • 500 queries / day
  • All 9 record types
  • +short mode
  • Single server targeting
  • Community support
Start Free
Authority
$149
/ month
  • Everything in Trace
  • Unlimited batch mode
  • Custom .digrc profiles
  • Recursive vs. authoritative split
  • Multi-server comparison
  • DNSSEC trust chain audit
  • SOC integrations
  • Dedicated support
Contact Sales
Testimonials

Trusted by DNS engineers

"Resolver's +trace waterfall saved us three hours during a misconfigured NS delegation. We saw the break instantly."

Jenna Kowalski
Jenna KowalskiSRE Lead, Cloudstream

"We switched from manual dig commands to Resolver's Query Builder and cut our DNS audit workflow from 2 hours to 15 minutes."

Alexei Romanov
Ravi NguyenDevOps Engineer, Nexus IO

"The DNSSEC validation view alone justified the Authority plan. Our security team can now audit trust chains without scripting."

Alicia Torres
Alicia TorresCISO, FinaGuard
FAQ

Frequently asked questions

What DNS record types does Resolver support?

All nine standard types: A, AAAA, MX, NS, TXT, CNAME, SOA, PTR, and SRV. We also support ANY queries for comprehensive domain snapshots and custom CLASS selection (IN, CH, HS).

How is +trace different from a normal query?

A normal query sends a recursive request to your configured resolver. +trace manually follows the delegation chain from root nameservers through TLD to authoritative, showing every hop and referral โ€” like DNS packet capture without the complexity.

Can I query specific DNS servers?

Absolutely. Use @server syntax to target any resolver โ€” @8.8.8.8 for Google, @1.1.1.1 for Cloudflare, or any custom nameserver IP. Compare responses across providers in seconds.

What is DNSSEC validation?

DNSSEC adds cryptographic signatures to DNS responses. Resolver's +dnssec flag verifies these signatures, ensuring responses haven't been tampered with in transit โ€” critical for preventing cache poisoning and man-in-the-middle attacks.

Does batch mode handle large domain lists?

Yes. Use resolver -f domains.txt to process files with thousands of domains. Resolver processes them sequentially with full output per query, perfect for migrations, audits, and monitoring sweeps.

What's the .digrc file?

The ~/.digrc file lets you set persistent default flags. For example, adding +short means every query automatically uses short mode. Think of it as your personal DNS configuration profile.

Backed by mandล