Softricks iDig vs DomainDig

iDig is a suite of products - with a robust 20 endpoint API at the base, Mobild apps, an AI Agent and a MCP Server - all serving a This is an iPhone App, which presents a unified view of DNS Resolution, Records and WHOIS information for a domain in an easy-to-understand way. It does not simply dump the raw output of the 'dig' command in UNIX. The Softricks iDig API that the App uses, fires off multiple requests and compiles data and provides diagnostics. The API also provides a Batch feature with async jobs to process bulk Domain queries. Here's a clean feature list for iDig: DNS Lookup & Resolution - Query all major record types: A, NS, SOA, DS, TXT, CNAME, CAA, SRV, TLSA, HTTPS, SVCB - Nameserver override support for targeted queries - DNSSEC, reverse lookup, and authoritative query options - Resolution health diagnostics with status codes (ok, nxdomain, servfail, etc.) DNSSEC - Full chain-of-trust validation (Root → TLD → domain) - DNSKEY inventory with KSK/ZSK breakdown and key tags - RRSIG expiry tracking with days-remaining alerts - Algorithm assessment with migration recommendations - Rollover readiness and DS-at-parent verification Email Security Auditing - SPF analysis: syntax, qualifier strength, DNS lookup count enforcement - DKIM probing across common and provider-inferred selectors - DMARC policy evaluation: none/quarantine/reject, reporting addresses, alignment - BIMI record detection with logo URL and VMC validation - Overall A–F deliverability grade with prioritized fix recommendations SSL/TLS & DANE - Certificate inspection: validity, expiry, SANs, issuer, domain match - Upcoming expiry warnings at 7, 30, and 90-day thresholds - DANE/TLSA cross-validation against live certificate hashes - Support for all four TLSA usage types (PKIX-TA, PKIX-EE, DANE-TA, DANE-EE) DNS Propagation & Zone Health - Propagation checks across 16 global resolvers simultaneously - Zone consistency auditing across all authoritative nameservers - AXFR zone transfer vulnerability detection - TTL advisory with migration readiness scoring and step-by-step lowering schedule Domain Intelligence - Parsed WHOIS with registrar, lifecycle dates, domain age, and expiry countdown - EPP/registrar lock status with plain-English status code decoding - IP geolocation with ISP, ASN, hosting detection, and timezone - IP blacklist/DNSBL checks across Spamhaus, Barracuda, SpamCop, SORBS, and more Infrastructure Discovery - Subdomain discovery probing ~70 common names plus Certificate Transparency logs - MX health checks with 35+ mail provider detection and RFC compliance validation - HTTP/HTTPS reachability with full redirect chain and HSTS inspection - Full domain diagnosis aggregating resolution and DNSSEC health in one call Developer & Integration Features - Async batch processing for up to 100 domains per request - Token scopes for API, mobile, agent, and MCP use cases - Plan tiers: Free, Pro, Business, and Unlimited - RESTful JSON API with full OpenAPI 3.1 spec

DomainDig is a fast, no-frills domain inspection tool for developers, sysadmins, and anyone who manages or troubleshoots servers and infrastructure. Enter any domain and run a full diagnostic in seconds: DNS: query A, AAAA, MX, NS, TXT, CNAME, SOA, SRV, CAA, and DS records including wildcard entries, with TTL values, DNSSEC status, and reverse DNS (PTR) lookup for the resolved IP. SSL/TLS: inspect the full certificate chain — common name, SANs, issuer, validity dates, TLS version and cipher, and days until expiry with automatic color-coded warnings. Email Security: parse SPF, DMARC, DKIM, MTA-STS, and BIMI records with pass/fail indicators so you can verify email deliverability at a glance. HTTP Headers: fire a HEAD request and review all response headers, with security-relevant headers (HSTS, CSP, X-Frame-Options, and more) highlighted automatically. Redirect Chain: trace every HTTP redirect hop from initial request to final destination, with status codes at each step. Reachability & Ports: measure TCP latency on ports 80 and 443, and scan common ports (FTP, SSH, SMTP, MySQL, PostgreSQL, and more) to see what's open. IP Geolocation: look up the hosting org, city, region, and country for the resolved IP, with a live map view. Ownership & Subdomains: pull registrar, registration and expiry dates, and nameservers via RDAP, check domain availability, and discover subdomains. Every result loads in parallel and independently, then rolls up into a risk score with plain-language insights. Go beyond a single lookup: - Monitor domains on a schedule and get alerts when DNS, TLS, or email records change. - Group domains into Workflows and run them as a batch. - Compare any two domains side by side, and track changes across a full snapshot history. - Run structured Audit sessions with checklists, findings, and evidence. - Export as text, CSV, JSON, Markdown, or PDF — single reports or whole portfolios. - Home Screen widgets, Shortcuts, and a share extension put it where you work. - Optional iCloud sync keeps your domains and history across your devices. - A built-in local API exposes reports to your own scripts and automation. Local-first by design: your data stays on device unless you export, share, or sync it. No accounts. No ads. No tracking.