New DNS Check service now available in MyNCSC
What is DNS Check?
DNS Check is a new service in MyNCSC provided in partnership with GDS (Government Digital Service), who curate DNS vulnerability feeds, and pass this data on through MyNCSC.
The data involved is a subset (currently limited to Dangling DNS vulnerabilities) of the vulnerability data returned by the basic monitoring undertaken within GDS’s Monitoring and sharing service.
Who is DNS Check available to?
DNS Check will be available to organisations responsible for securing UK public sector domains. This includes central government departments and arms-length bodies, local government, devolved administrations, NHS, law enforcement and emergency services.
The service is not available to academic institutions, charities or private sector organisations.
What do I need to do now?
DNS Check will be available to all eligible organisations, during March, all domains in their asset portfolios will be assigned to the new DNS Check service. (this can be reversed for specified domains).
To ensure DNS Check findings are received by your organisation, proof of asset ownership (or control) is required using MyNCSC asset verification.
We recommend verifying the highest level domain(s) within an organisation's asset portfolio as this verification is inherited by all child domains (sub-domains).
For help verifying your domains, read the Asset verification page in the getting started guide.
If you feel you should be eligible for DNS Check in MyNCSC but your organisation is showing as ineligible, please contact us.