Check ID:
Provider: Vercel
Service:
Severity: MEDIUM
Categories:
Resource type:
domain_dns_properly_configuredProvider: Vercel
Service:
domainSeverity: MEDIUM
Categories:
trust-boundariesResource type:
NotDefinedWhat this check verifies
Vercel domains are assessed for DNS configuration to verify records properly point to Vercel’s infrastructure. Misconfigured DNS can result in domains that fail to serve content, SSL certificate provisioning failures, and degraded user experience.Risk
Misconfigured DNS records can cause the domain to be unreachable, preventing users from accessing the application. It can also prevent SSL certificate provisioning, resulting in browser security warnings. Stale DNS configurations may point to decommissioned infrastructure, creating a risk of subdomain takeover.Recommendation
Update DNS records at your domain registrar to correctly point to Vercel. Use a CNAME record for subdomains or an A record for apex domains. Verify the configuration in the Vercel dashboard after making changes.Remediation
Dashboard steps- Sign in to the Vercel dashboard
- Navigate to the project Settings > Domains
- Review the DNS configuration status for each domain
- Update DNS records at your domain registrar to match the values shown in the Vercel dashboard
- Wait for DNS propagation (typically 24-48 hours)
References
Where this check fires
This check runs on every scheduled scan against your Vercel account. Findings appear at Cloud Security → Findings filterable byCheck ID = domain_dns_properly_configured. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to Vercel checks