Scan coverage by integration
Connecting a DNS provider integration gives DigiCert Posture Management zone-level access to DNS data, enabling policy checks that external scanning alone cannot perform. Ticketing integrations enable ticket creation from findings but do not affect policy coverage.
Provider availability
Integration | Type | What it enables |
|---|---|---|
AWS Route 53 | DNS provider | Provider-connected assessments requiring zone-level DNS data from AWS Route 53. Required to complete Dangling Record Check. |
NS1 | DNS provider | Provider-connected assessments requiring zone-level DNS data from NS1. Required to complete Dangling Record Check. |
DigiCert UltraDNS | DNS provider | Provider-connected assessments requiring zone-level DNS data from DigiCert UltraDNS. Required to complete Dangling Record Check. |
Cloudflare | DNS provider | Provider-connected assessments requiring zone-level DNS data from Cloudflare. Required to complete Dangling Record Check. |
Atlassian Jira | Ticketing | Enables ticket creation directly from findings. No effect on policy coverage. |
Service Now | Ticketing | Enables ticket creation directly from findings. No effect on policy coverage. |
Policy coverage
Policies with a requirement of DNS Integration require a connected DNS provider integration to run. Policies with a requirement of None run as external scans without an integration. Posture impact shows the maximum number of points deducted from the posture score if the policy is violated.
Policy | Principle | Requirement | Posture impact |
|---|---|---|---|
Global Reachability Check | Availability & Redundancy | None | -12 |
NS Concentration Check | Availability & Redundancy | None | -10 |
SOA Serial Consistency Check | Availability & Redundancy | None | -10 |
Dangling Record Check | Delegation Correctness | DNS Integration | -15 |
Delegation Health Check | Delegation Correctness | None | -14 |
AI Agent Identity - ANS Discovery& PKI | Security Configuration | None | 0 |
DNSSEC Zone Signing | Security Configuration | None | -15 |
Mail DKIM | Security Configuration | None | -10 |
Mail DMARC | Security Configuration | None | -20 |
Mail SPF | Security Configuration | None | -15 |
TLS Certificate PQC Readiness | Security Configuration | None | 0 |
TLS Certificate Validity | Security Configuration | None | -20 |
Mail MX | Protocol Compliance | None | -10 |
Registration Health | Configuration Hygiene | None | -20 |
참고
Policies with a posture impact of 0 generate advisory findings only. These findings do not affect the posture score.