DNS Daddy
Open-source protective DNS experiment.
STATUS: Alpha. Actively developed, not independently reviewed.
A lightweight, self-hosted protective DNS resolver and DNS-security visibility tool. A single Go binary, released under Apache-2.0. It began as a Master's project.
What it does
Resolves DNS and blocks known-malicious domains using public threat-intelligence feeds, then makes what happened visible.
- → Self-hosted protective DNS resolver
- → Blocklisting from public threat-intelligence feeds
- → Visibility into what was asked for and what was blocked
- → SIEM-friendly exports
What it is not
- → Not independently reviewed
- → Alpha software
- → The behavioural detectors are experimental and alert-only
How it is built
The implementation is AI-assisted and then human-reviewed: static analysis, security review, testing, and documented limitations. The threat model and assurance notes are published with it.
Method
1. BUILD
Write the thing, with AI assistance on the implementation.
2. BREAK
Attack it, fuzz it and find where it falls over.
3. ANALYSE
Static analysis and security review of what came out.
4. SECURE
Fix what was found and write down what is still true.
5. REBUILD
Do it again, knowing more than last time.