📜 Companies without DNS CAA records
These domains have no CAA records, meaning any Certificate Authority in the world can issue SSL certificates for them.
249
Companies affected
2599
Total scanned
10%
Prevalence
Domain
Score
Tier
CAA Status
+244 more companies
This dataset is available on request. Leave your work email and we'll send you the full list within 24 hours.
No spam — we only use this to send you the data
Request received
We'll send the full dataset to your inbox shortly. Keep an eye out for an email from the LynxRadar team.
Which companies don't have DNS CAA records?
CAA (Certificate Authority Authorization) DNS records specify which Certificate Authorities are permitted to issue certificates for a domain. Without CAA, any of the hundreds of public CAs can issue a certificate, increasing the risk of unauthorized or misissued certificates that could be used in man-in-the-middle attacks.
LynxRadar scanned 2599 domains including Fortune 500 companies and Y Combinator startups. Of those, 249 (10%) were found to have this security gap. The data above is updated continuously as new domains are scanned. Scan any domain to check its status.