About Domain Radar

An instrument for the security of a whole domain landscape.

Domain Radar continuously measures DNS, email authentication and infrastructure dependencies across every domain in a country or sector. No sampling, no guesswork — the whole population, observed over time.

1 462 775: .SE domains observed
100%: of domains
2.7 years: of historical data since February 2024

How it works

Four steps, repeated continuously.

Enumerate

Build a complete list of the target domains — a whole ccTLD, a sector, or the entities within NIS2 scope.
Measure

Scan DNSSEC, SPF, DKIM, DMARC policy and reporting, and the posture of every nameserver.
Assess

Score resilience, registrar and ASN exposure, and supply-chain dependencies.
Report

Deliver portal dashboards and printable briefings — then scan again, and track what changed.

What it is used for

Evidence for the people who decide.

Identify misconfigurations that enable email spoofing and DNS-based attacks.
Give national reports and audits accurate, data-driven decision support.
Track sector compliance and resilience over time, including for NIS2.
Spot suspicious re-registrations and risky registrar or ASN changes.

What it finds

Concrete, and ranked.

Missing or weak DMARC policies.
DNSSEC missing or misconfigured, including weak or legacy digests.
Single-provider nameserver risk.
Concentration of registrars and autonomous systems — and shifts between them.

How findings are delivered

Reports

Nation-level and sector reports with ranked insights.

Drill-down

Per entity, domain, country, registrar, ASN and nameserver.

Portal

Dashboards, an API and printable PDF briefings.

Briefings

Confidential sessions for senior decision-makers.

Built in Sweden

Developed by Softjoy AB in Umeå.

Softjoy is the company behind lets-secure.eu. We help companies and public-sector organisations improve their DNS, web and email security.

Data residency: Primary processing in Sweden by Swedish staff. EU-only by default.
Privacy: Privacy by design: aggregate reporting, and secure handling of operational data.
Standards: EU email security references for SPF, DKIM and DMARC, and DNSSEC best practice for critical services.

Where it started

A study of the entire .SE namespace.

Domain Radar began as a study of the security of the Swedish .se namespace: every registered domain, analysed for SPF, DKIM and DMARC coverage and implementation, for DNSSEC, and for DNS resilience.

The measurement has run continuously since February 2024. What began as a one-off study is now a record of how the namespace changes over time.

Funding

Co-funded by the European Union.

The initial development of Domain Radar was funded through Financial Support to Third Parties, as part of the MSB cybersecurity funding programme, with the Swedish Civil Contingencies Agency (MSB), the National Cybersecurity Coordination Centre Sweden (NCC-SE) and the European Cybersecurity Competence Centre (ECCC).