dnswatchdog.iodocs
Provider Configuration

Provider Overview

How DNS providers work in DNS Watchdog.

DNS Watchdog connects to your DNS hosting providers to discover zones, sync records, and monitor for security issues.

Supported providers

ProviderAuthentication
CSCAPI credentials
Vercara UltraDNSUsername + Password
AWS Route53Cross-account IAM Role
Microsoft Azure DNSService Principal
Google Cloud DNSService Account JSON
CloudflareAPI Token

Read-only monitoring

DNS Watchdog connects to every provider with read-only access — it discovers zones and syncs records, but never makes changes to your DNS. It detects changes made elsewhere; it does not make them itself.

Adding a provider

  1. Go to Settings → Providers in the sidebar
  2. Click Add Provider

The Add Provider dialog showing the provider type selection step

  1. Select your provider type

Provider type selector showing Route53, Cloudflare, CSC, Azure DNS, Google Cloud DNS, and UltraDNS options

  1. Enter the required credentials
  2. Click Save

DNS Watchdog validates the credentials immediately and begins zone discovery automatically.

What happens next

After saving your provider:

  1. Zone discovery (1–2 minutes) — DNS Watchdog queries the provider API to find all zones under the account
  2. Record sync (2–5 minutes) — each zone's DNS records are pulled and stored
  3. Initial scan (varies) — records are scanned for open ports, HTTP behaviour, SSL certificates, and subdomain takeover risks
  4. Results available — check the Zones page to see discovered zones, and the Issues page for scan results

Notifications are suppressed during the initial sync — the first discovery is treated as baseline data rather than changes.

Credential security

All provider credentials are encrypted at rest. DNS Watchdog requests only the minimum read-only permissions needed to discover zones and sync records.

Zone discovery

After a provider is connected, DNS Watchdog queues a zone discovery job that runs asynchronously. All zones managed by the provider are discovered and synced. You can trigger re-discovery at any time from the Zones page.

On this page