DNS Hygiene API

Keep Your DNS Clean as You Add New SaaS Tools

Every new tool you use—like HubSpot, Salesforce, or Zendesk—needs its own space in your DNS settings. Without a regular cleanup, these settings become messy, causing errors and leaving old vendors with access to your domain. Veldica helps you find and remove these hidden risks.

Use the Pro audit to find old tools you don't use anymore and see which vendors are still authorized to send mail as you.

Audit Your Vendors Try Free Audit

Overview

Every new tool you use—like HubSpot, Salesforce, or Zendesk—needs its own space in your DNS settings. Without a regular cleanup, these settings become messy, causing errors and leaving old vendors with access to your domain. Veldica helps you find and remove these hidden risks.

The Problem
Vendor Mess

Teams add new tools but rarely remember to remove the old ones. This creates security holes and can break your email delivery settings.

The Solution
Automatic Inventory

Veldica shows you exactly which vendors are listed in your DNS. Use this to make sure only your current, approved tools have access.

The Result
Lean and Secure

Keep your DNS settings lean by authorizing only the tools you actively use.

Current workflow

Keeping your DNS clean requires a repeatable process for adding and removing vendors.

  1. List all the tools your company uses to send email.
  2. Audit your DNS with Veldica to see which tools are actually listed.
  3. Find old records for tools you no longer pay for or use.
  4. Remove those old rules and keys from your DNS records.
  5. Check again with Veldica to make sure your changes are correct and didn't break anything.
  6. Set up a regular check every few months to keep things clean.

Where it breaks

Old DNS records pile up quickly, making your settings fragile and less secure.

  • SPF records often break because too many old tools are still listed.
  • Old DKIM selectors for tools you've stopped using stay published, expanding your attack surface.
  • Mail servers may find your domain 'suspicious' if you authorize too many different tools.
  • Without an API, checking every domain and tool by hand is almost impossible.

Replacement model

Replace 'set-and-forget' DNS with scheduled API cleanup.

Manual Check

Scan a long list of text by hand. Teams often miss a vendor they stopped using years ago.

Vendor Search

Veldica identifies the exact tools (like 'Microsoft 365' or 'SendGrid') linked to your records.

Change Alerts

Find changes in your vendor list that your security team didn't authorize.

Cleanup Plan

Use the fix-plan to find exactly which text strings can be safely deleted.

Verified request

Audit your domain to see all your authorized email tools.

Request
curl -H 'content-type: application/json' \
  -H 'X-RapidAPI-Key: YOUR_RAPIDAPI_KEY' \
  -H 'X-RapidAPI-Host: email-domain-trust-auditor.p.rapidapi.com' \
  -X POST 'https://email-domain-trust-auditor.p.rapidapi.com/v1/pro/audits/domain' \
  -d '{
    "domain": "example.com"
  }'

The provider_analysis section identifies the platforms behind your DNS settings.

Verified response

A Pro audit result showing several authorized email tools.

Provider analysis result

A provider list for the email tools authorized in your DNS.

{
  "domain": "example.com",
  "risk": {
    "risk_level": "medium",
    "enforcement_status": "none",
    "assessment_confidence": "high"
  },
  "provider_analysis": {
    "declared_providers": [
      "google_workspace", "salesforce", 
      "zendesk", "hubspot"
    ],
    "inferred_providers": ["mailgun"],
    "provider_notes": "Multiple marketing and support platforms detected."
  }
}

Output interpretation

Use the vendor analysis to start your DNS cleanup.

  • Check the declared_providers list for any tools you don't recognize.
  • Look for 'too many lookups' errors caused by having too many tools listed.
  • Identify which tool is associated with each DKIM selector we find.
  • Use the fix-plan to create a new, cleaner record that only includes current tools.

Production Usage: Quarterly Cleanup

How a platform team uses the API to stay lean.

  1. Run an automated audit of all company domains once every three months.
  2. Get a list of all authorized email senders for every domain.
  3. Compare that list against the tools the company actually pays for.
  4. Flag any tools that should have been removed or weren't approved.
  5. Create a cleanup task for the IT team with the correct new settings.
Check your vendor list
POST /v1/pro/audits/domain
{
  "domain": "acme-growth.com"
}

Tool comparison

Why Veldica is the best tool for managing your SaaS settings.

Basic Tools

They show you the text of the record, but not which company it belongs to.

Vendor Guides

They tell you how to add their tool, but never how to remove it correctly.

Veldica API

Turns confusing technical records into a vendor list your team can review.

Keep Exploring

Use the Workflow Library to browse more guides, comparisons, and integration examples to continue your evaluation.

Workflow Library
Browse all workflow pages

See the solutions, comparisons, and integration guides collected in one place.
Samples
Inspect sample output

Review grounded audit, compare, fix-plan, and report excerpts before you wire the API into anything.
Reference
Move into the docs

Jump from the workflow page into the quickstart, endpoint guides, and full OpenAPI reference.

Clean Up Your DNS

Don't let old tools weaken your security. Use the Veldica API to see your vendors and keep your domain settings lean and strong.

Free Trust Checker Find My Vendors Product Overview Free Audit Workflow Library