A tool that says your DNS is wrong should show you the record

An audit that asserts without evidence is asking for trust it has not earned, and the first thing a sceptical user does is go check by hand. Printing the actual public record next to each verdict removed that step, and removed most of the support questions with it.