DK Hostmaster

Denmark · owned by Dansk Internet Forum (Denmark) · www.dk-hostmaster.dk · 27 vendors

Punktum dk A/S, formerly known as DK Hostmaster, is an independent Danish non-profit organization responsible for administering all .dk domain names. It maintains a critical part of the Danish internet infrastructure, including DNS and a WHOIS database, and works to ensure the security of the .dk top-level domain. The organization handles the registration, redelegation, renewal, and deletion of .dk domain names.

Resilience scores

Disruption prediction

DK Hostmaster has an estimated 40% probability of disruption in the next 6 months.

12 of DK Hostmaster's 27 vendors monitored for disruptions.

Technology vendors

Services catalogue

5 services in catalogue across 3 categories; runs on 27 sub-vendors.

Insights

Last updated 2026-09-13 · revision 6

27 direct vendors, 347 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

DK Hostmaster's migration readiness is assessed at 55, placing them in the medium readiness category. They possess several strengths that would facilitate migration, notably the use of modern infrastructure tools like Docker for containerization and Ansible for automation, which are highly beneficial for cloud adoption and infrastructure as code practices. Their experience with REST APIs also supports integration with cloud services. However, significant challenges and unknowns temper their readiness. The presence of legacy technologies such as Perl and Drupal for their public website may require substantial refactoring or re-platforming during a migration. Their core business involves highly specialized functions like ccTLD Registry Management, EPP, and WHOIS protocols, which might not have direct cloud-native equivalents and could necessitate custom solutions or IaaS deployments. Critical missing data includes 'Data Residency Requirements' and 'Financial Stability', both of which are paramount for planning and funding a migration project. The contradiction in vendor data ('Total Vendors: 0' vs. listed vendor countries) makes a precise assessment of vendor lock-in challenging. Assuming there are indeed vendors as implied by the geographic diversity, the unknown vendor lock-in risk and the potential complexity of managing relationships across 10 different vendor HQ countries could pose challenges during a migration. Additionally, the integration with MitID, a specific Danish digital identity system, would require careful consideration and re-integration in a new environment.

Compliance

4 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

As a critical digital infrastructure provider, information security management is crucial. ISO 27001 certification would demonstrate systematic security controls. Risk is moderate as security incidents could impact domain resolution services and customer trust, though not legally mandated.

Evidence: https://punktum.dk

GDPR (source) — Assessment Required

As a Danish company processing personal data of domain registrants (names, addresses, contact information), GDPR compliance is mandatory. Non-compliance can result in fines up to 4% of annual turnover or €20M. Domain registries handle significant volumes of personal data and are subject to regular scrutiny. The company's WHOIS database contains personal information that must be processed in compliance with GDPR requirements.

Evidence: https://punktum.dk

NIS2 (source) — Assessment Required

As a domain name registry operator, DK Hostmaster likely qualifies as an Essential Entity under NIS2 for digital infrastructure services. Domain registries are critical digital infrastructure. Non-compliance can result in significant fines and operational restrictions. The company's website specifically mentions NIS2 requirements for businesses with .dk domains, indicating awareness of the regulation.

Evidence: https://punktum.dk

Financials

Three-year financials

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report