Softricks iDig vs ClearWay

iDig is a suite of products - with a robust 20 endpoint API at the base, Mobild apps, an AI Agent and a MCP Server - all serving a This is an iPhone App, which presents a unified view of DNS Resolution, Records and WHOIS information for a domain in an easy-to-understand way. It does not simply dump the raw output of the 'dig' command in UNIX. The Softricks iDig API that the App uses, fires off multiple requests and compiles data and provides diagnostics. The API also provides a Batch feature with async jobs to process bulk Domain queries. Here's a clean feature list for iDig: DNS Lookup & Resolution - Query all major record types: A, NS, SOA, DS, TXT, CNAME, CAA, SRV, TLSA, HTTPS, SVCB - Nameserver override support for targeted queries - DNSSEC, reverse lookup, and authoritative query options - Resolution health diagnostics with status codes (ok, nxdomain, servfail, etc.) DNSSEC - Full chain-of-trust validation (Root → TLD → domain) - DNSKEY inventory with KSK/ZSK breakdown and key tags - RRSIG expiry tracking with days-remaining alerts - Algorithm assessment with migration recommendations - Rollover readiness and DS-at-parent verification Email Security Auditing - SPF analysis: syntax, qualifier strength, DNS lookup count enforcement - DKIM probing across common and provider-inferred selectors - DMARC policy evaluation: none/quarantine/reject, reporting addresses, alignment - BIMI record detection with logo URL and VMC validation - Overall A–F deliverability grade with prioritized fix recommendations SSL/TLS & DANE - Certificate inspection: validity, expiry, SANs, issuer, domain match - Upcoming expiry warnings at 7, 30, and 90-day thresholds - DANE/TLSA cross-validation against live certificate hashes - Support for all four TLSA usage types (PKIX-TA, PKIX-EE, DANE-TA, DANE-EE) DNS Propagation & Zone Health - Propagation checks across 16 global resolvers simultaneously - Zone consistency auditing across all authoritative nameservers - AXFR zone transfer vulnerability detection - TTL advisory with migration readiness scoring and step-by-step lowering schedule Domain Intelligence - Parsed WHOIS with registrar, lifecycle dates, domain age, and expiry countdown - EPP/registrar lock status with plain-English status code decoding - IP geolocation with ISP, ASN, hosting detection, and timezone - IP blacklist/DNSBL checks across Spamhaus, Barracuda, SpamCop, SORBS, and more Infrastructure Discovery - Subdomain discovery probing ~70 common names plus Certificate Transparency logs - MX health checks with 35+ mail provider detection and RFC compliance validation - HTTP/HTTPS reachability with full redirect chain and HSTS inspection - Full domain diagnosis aggregating resolution and DNSSEC health in one call Developer & Integration Features - Async batch processing for up to 100 domains per request - Token scopes for API, mobile, agent, and MCP use cases - Plan tiers: Free, Pro, Business, and Unlimited - RESTful JSON API with full OpenAPI 3.1 spec

ClearWay points your iPhone at an encrypted DNS resolver of your choosing. Ad and tracker domains stop resolving, so a large share of the ads inside games and free apps never load in the first place. No VPN tunnel. No proxy. No account. iOS applies the setting system-wide and ClearWay gets out of the way. TEST BEFORE YOU TRUST Every resolver in the list can be measured from inside the app. ClearWay sends real DNS queries, reports round-trip latency, and checks how many known ad domains each resolver actually blocks. You see the numbers before you switch, not after. CHOOSE YOUR RESOLVER Ad-blocking, family, security and unfiltered resolvers are included, each with its transport, region and logging policy stated plainly. Add your own DoH or DoT endpoint if you run one, or paste a NextDNS configuration ID to use your own blocklists. BLOCK ADULT CONTENT Family resolvers filter adult sites, and the filter covers every app and browser on the device at once, with nothing to install app by app — a fast way to set up a child's iPhone or iPad. AdGuard's family option is the one that blocks advertising as well and enforces safe search; the Cloudflare and Yandex family options filter adult content and malware but leave ads alone. Each row says which does what, and the built-in tester lets you confirm it rather than take our word for it. ENCRYPTED BY DEFAULT iOS only accepts DNS over HTTPS and DNS over TLS for system-wide DNS, so every option here is encrypted. Your queries are not readable by the network you are on. SHORTCUTS Turn protection on or off from Shortcuts, Spotlight or the Action button. WHAT DNS BLOCKING CANNOT DO Honest limits, up front. Ads served from the same domain as an app's own API cannot be separated out by DNS. Rewarded video ads are blocked too, which can stall games that require watching one to continue — switch to an unfiltered resolver when that happens. This is a filter, not a guarantee. ClearWay is not affiliated with any of the DNS providers it can connect to.