About CertaDNS
Three product lines, one DNS platform, one bill.
What we do
CertaDNS is a DNS platform that combines three product lines that most vendors sell separately:
Dynamic DNS
Stable hostnames for changing IPs. Router-compatible (dyndns2), web dashboard, and API.
Managed DNS
Authoritative hosting for your zone — four secondaries across two networks, DNSSEC, vanity nameservers, analytics.
Email Authentication
SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI, hosted for you. Free for your first domain, and you keep your nameservers.
Why we built this
Email authentication is a stack of six protocols (SPF, DKIM, DMARC, MTA-STS, BIMI, TLS-RPT) and every major vendor sells them as separate products or tiered add-ons. A team that wants DMARC reporting and hosted MTA-STS and SPF flattening typically ends up paying multiple vendors or jumping to an enterprise tier they don't need.
We built CertaDNS because the protocols share infrastructure — they're all just DNS records (plus one TLS cert in the case of MTA-STS). Once you're hosting authoritative DNS for a customer, the marginal cost of adding hosted DKIM, DMARC ingestion, or MTA-STS cert issuance is small. So they are one product on one ladder, and the first rung is free: one domain, hosted DMARC and BIMI, and your reports processed and readable.
A free tier rather than a trial, because the first useful thing email authentication does is tell you who is already sending as you — and you cannot decide whether that is worth paying to fix until you have seen it. Charging for the answer means most domains never get asked the question.
The Dynamic DNS and managed DNS lines stand on their own — both predate the email-auth wedge — but they all share the same authoritative-DNS infrastructure underneath, which is why bundling makes economic sense for us and for you.
What sets us apart
Bundled email auth, no tier gating
Hosted DKIM, DMARC + policy wizard, managed MTA-STS, TLS-RPT and BIMI from $12 a month, with no tier gates between them. Compare against the alternatives.
Dynamic SPF, not just flattening
Per-sender SPF computed at query time, so your record never grows as you add providers — and you never hit the 10-lookup limit.
Managed MTA-STS in the bundle
We issue and renew the TLS cert, host the policy, and publish the DNS records — all automated. Most competitors gate this behind a higher tier.
DNSSEC by default
The certadns.com zone is DNSSEC-signed end-to-end and we support DNSSEC on managed customer zones. Records are auto-resigned on every change with proper SOA bump + NOTIFY.
Company
CertaDNS LLC is a small DNS company. It started as a Dynamic DNS product and grew into managed DNS and email authentication — which is why the three still share one set of nameservers and one account.
Engineering is the company. The infrastructure that runs your zones is the same infrastructure we use to host certadns.com itself.
Get in touch
General: info@certadns.com
Support: support@certadns.com
Abuse: abuse@certadns.com
Legal entity: CertaDNS LLC