diff --git a/net-dns/dnsviz/Manifest b/net-dns/dnsviz/Manifest
index 76d8863e25a61..1f63e772d1f88 100644
--- a/net-dns/dnsviz/Manifest
+++ b/net-dns/dnsviz/Manifest
@@ -1 +1,2 @@
 DIST dnsviz-0.10.0.gh.tar.gz 480916 BLAKE2B 51cdf40d91429447b01470f9356140ed53b488c6831bd06a8352493c0938d995c625024c2a976c2d7408a56085d15dcdbfe70486304a7d0c2168d93033939659 SHA512 0bc07ad6edc25986ca17d5e02bee6e120c2e3f01d3ee015a8ed8d8a6471f3e1b3176bc3194a0b9172cf789bac42548fb64f095fc94264bd8ea97a9b1ed484114
+DIST dnsviz-0.11.1.tar.gz 288736 BLAKE2B 0113f6b773a9d1e075056c3386b86cd9f29b306f352aa941eb26d186abb09ab07400ed9b3108c060b6d123418810dc3aaa1c3c5ac59ee193f527ef630aa5309f SHA512 aacff70afcc5cfc9852fd1773828953eddc1bcdc3cda397328a15f66086b7d1aab2c5c2daefa935db97e527bcec5cf74fd35ee35d29df5a526bd220c8e12dcef
diff --git a/net-dns/dnsviz/dnsviz-0.11.1.ebuild b/net-dns/dnsviz/dnsviz-0.11.1.ebuild
new file mode 100644
index 0000000000000..220bff9764044
--- /dev/null
+++ b/net-dns/dnsviz/dnsviz-0.11.1.ebuild
@@ -0,0 +1,61 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DISTUTILS_USE_PEP517=setuptools
+PYTHON_COMPAT=( python3_{11..14} )
+
+inherit distutils-r1 optfeature pypi
+
+DESCRIPTION="Tool suite for analysis and visualization of DNS and DNSSEC"
+HOMEPAGE="
+	https://dnsviz.net/
+	https://github.com/dnsviz/dnsviz/
+	https://pypi.org/project/dnsviz/
+"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+RDEPEND="
+	>=dev-python/dnspython-1.13[${PYTHON_USEDEP}]
+	>=dev-python/cryptography-36.0.0[${PYTHON_USEDEP}]
+	>=dev-python/pygraphviz-1.3.1[${PYTHON_USEDEP}]
+"
+BDEPEND="
+	media-gfx/graphviz
+	test? (
+		${RDEPEND}
+		net-dns/bind
+	)
+"
+
+distutils_enable_tests pytest
+
+python_prepare_all() {
+	# Fix the ebuild to use correct FHS/Gentoo policy paths
+	sed -i \
+		-e "s|share/doc/dnsviz|share/doc/${PF}|g" \
+			"${S}"/setup.py \
+			|| die
+
+	distutils-r1_python_prepare_all
+}
+
+python_test() {
+	EPYTEST_DESELECT=(
+		# Needs network
+		tests/test_61_dnsviz_probe_options.py::DNSVizProbeOptionsTestCase::test_authoritative_option
+		tests/test_61_dnsviz_probe_options.py::DNSVizProbeOptionsTestCase::test_recursive_aggregation
+		tests/test_61_dnsviz_probe_options.py::DNSVizProbeOptionsTestCase::test_recursive_option
+	)
+
+	epytest -k "not _online"
+}
+
+pkg_postinst() {
+	optfeature "Support for pre-deployment testing" net-dns/bind
+	optfeature "Support for DNSSEC signatures using GOST algorithm or digest" dev-libs/ghost-engine
+}
diff --git a/profiles/features/wd40/package.mask b/profiles/features/wd40/package.mask
index 73a8a226a375d..b4abfdcf15e16 100644
--- a/profiles/features/wd40/package.mask
+++ b/profiles/features/wd40/package.mask
@@ -375,6 +375,7 @@ media-gfx/gimp
 media-plugins/gimp-lqr
 media-video/rav1e
 net-analyzer/wtfis
+net-dns/dnsviz
 net-dns/pdns-recursor
 net-im/gajim
 >=net-irc/polari-3.37