Akamai launches DNS Posture Management for multicloud security

Akamai has introduced a new solution intended to address DNS misconfigurations and compliance gaps across multicloud environments.

The solution, named Akamai DNS Posture Management, is designed to give security teams centralised, real-time visibility and control over DNS assets held across major cloud providers such as Akamai, AWS, Microsoft Azure, and Google Cloud.

DNS, the system responsible for helping computers and other resources locate each other over the internet, has become an essential operational component for modern organisations. This also makes it a significant target for cyberattacks, including Distributed Denial of Service (DDoS) attacks.

Research indicates that more than one-third of all global DDoS attack events occur in the EMEA region, with DNS DDoS attacks being among the most common types. Despite this, many organisations continue to struggle with fragmented visibility, outdated DNS records, and the challenges posed by mounting regulatory requirements.

Large entities often operate multiple DNS systems from various vendors. This complexity can cause misalignments between systems, leading to outdated configurations and risks such as expired certificates or lack of compliance with new security standards, including post-quantum cryptography requirements.

Security teams face challenges not only from misconfigurations but also from the overwhelming volume of alerts and complex compliance pressures. Manual workflows can contribute to high-priority issues being missed, increasing organisations' vulnerability to potential attacks.

Sean Lyons, SVP and General Manager, Infrastructure Security Solutions & Services, Akamai, commented: "DNS security often flies under the radar, but it's vital in keeping businesses secure and running smoothly. For many organisations, the challenge isn't setting up DNS — it's knowing whether all their systems are actually properly configured and secured. Those organisations really need a simple way to see what's happening across their DNS environment to take action quickly. That's the problem we're solving with DNS Posture Management. Security practitioners get a clear, unified view that helps them identify priority issues early, stay compliant, and keep their networks performing at their best."

The Akamai DNS Posture Management service provides a unified interface that enables teams to monitor and manage DNS assets from multiple cloud platforms in one place. The platform automates the identification of misconfigurations, security vulnerabilities, and certificate risks, including compliance gaps related to post-quantum standards. Automated detection helps prevent DNS-based risks such as spoofing, cache poisoning, and unauthorised certificate issuance.

Persistent vulnerabilities or misconfigurations on domains can create opportunities for threat actors, who may exploit these weaknesses to imitate organisations' brands, facilitate fraud or phishing campaigns, or even bring entire DNS operations offline, resulting in service outages.

The platform supports compliance automation for frameworks such as NIST, PCI DSS, and HIPAA, aiming to streamline compliance efforts, reduce costs, and integrate relevant findings into organisations' incident response processes.

Akamai DNS Posture Management includes a Certificate Monitor that organises digital certificates by domain name. This feature is intended to help organisations detect and address risks related to expired, misconfigured, or rogue certificates, and to provide an HTTP security posture assessment for the associated domains.

Visibility features extend to zones, domains, sub-domains, and DNS records, and the system supports integration across all major DNS providers, encompassing Akamai Cloud, AWS, Microsoft Azure, Google Cloud Platform, and others.

An optional managed security service is available, offering organisations access to Akamai's global team of security experts, providing ongoing 24/7 monitoring and support for security operations.

The launch of this platform reflects the ongoing needs of enterprises to safeguard the DNS layer amid increasing complexity and stricter regulatory demands.