About CertaDNS
Three product lines, one DNS platform, one bill.
What we do
CertaDNS is a DNS platform that combines three product lines that most vendors sell separately:
Dynamic DNS
Stable hostnames for changing IPs. Router-compatible (dyndns2), web dashboard, and API.
Managed DNS
Authoritative hosting for your zone — four anycast secondaries, DNSSEC, vanity nameservers, analytics.
Email Authentication
SPF, DKIM, DMARC, MTA-STS, BIMI, and TLS-RPT — bundled at $35/month flat.
Why we built this
Email authentication is a stack of six protocols (SPF, DKIM, DMARC, MTA-STS, BIMI, TLS-RPT) and every major vendor sells them as separate products or tiered add-ons. A team that wants DMARC reporting and hosted MTA-STS and SPF flattening typically ends up paying multiple vendors or jumping to an enterprise tier they don't need.
We built CertaDNS because the protocols share infrastructure — they're all just DNS records (plus one TLS cert in the case of MTA-STS). Once you're hosting authoritative DNS for a customer, the marginal cost of adding DKIM rotation, DMARC ingestion, or MTA-STS cert issuance is small. So we bundle everything at one flat $35/month — the "every email-auth pillar in one product" pitch the category was missing.
The Dynamic DNS and managed DNS lines stand on their own — both predate the email-auth wedge — but they all share the same authoritative-DNS infrastructure underneath, which is why bundling makes economic sense for us and for you.
What sets us apart
Bundled email auth, no tier gating
SPF flattening, dynamic per-sender SPF, DKIM rotation, DMARC + policy wizard, managed MTA-STS, BIMI, TLS-RPT — all in one $35/mo add-on. Compare against the alternatives.
Dynamic SPF, not just flattening
Per-sender SPF computed at query time, so your record never grows as you add providers — and you never hit the 10-lookup limit.
Managed MTA-STS in the bundle
We issue and renew the TLS cert, host the policy, and publish the DNS records — all automated. Most competitors gate this behind a higher tier.
DNSSEC by default
The certadns.com zone is DNSSEC-signed end-to-end and we support DNSSEC on managed customer zones. Records are auto-resigned on every change with proper SOA bump + NOTIFY.
Company
CertaDNS is the operating brand of LockIP LLC, a small DNS company. CertaDNS launched as the consolidated brand after the original Dynamic DNS product (lockip.net) grew into managed DNS and email authentication.
Engineering is the company. The infrastructure that runs your zones is the same infrastructure we use to host certadns.com itself.
Get in touch
General: info@certadns.com
Support: support@certadns.com
Abuse: abuse@certadns.com
Legal entity: LockIP LLC