Check ID: domain_dns_properly_configured
Provider: Vercel
Service: domain
Severity: MEDIUM
Categories: trust-boundaries
Resource type: NotDefined

What this check verifies

Vercel domains are assessed for DNS configuration to verify records properly point to Vercel’s infrastructure. Misconfigured DNS can result in domains that fail to serve content, SSL certificate provisioning failures, and degraded user experience.

Risk

Misconfigured DNS records can cause the domain to be unreachable, preventing users from accessing the application. It can also prevent SSL certificate provisioning, resulting in browser security warnings. Stale DNS configurations may point to decommissioned infrastructure, creating a risk of subdomain takeover.

Recommendation

Update DNS records at your domain registrar to correctly point to Vercel. Use a CNAME record for subdomains or an A record for apex domains. Verify the configuration in the Vercel dashboard after making changes.

Remediation

Dashboard steps
  1. Sign in to the Vercel dashboard
  2. Navigate to the project Settings > Domains
  3. Review the DNS configuration status for each domain
  4. Update DNS records at your domain registrar to match the values shown in the Vercel dashboard
  5. Wait for DNS propagation (typically 24-48 hours)

References

Where this check fires

This check runs on every scheduled scan against your Vercel account. Findings appear at Cloud Security → Findings filterable by Check ID = domain_dns_properly_configured. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to Vercel checks