Zones
Browse all discovered DNS zones across your connected providers — view record counts, sync status, email security posture (SPF, DKIM, DMARC), and trigger re-discovery.
A Zone represents a DNS zone (e.g. example.com) discovered from a connected provider. Zones are the organisational unit that groups records together and the scope for email security checks.
When a provider syncs, DNS Watchdog discovers all zones under that account. Each zone tracks its record count, issue count, sync status, and email security posture (SPF, DKIM, DMARC).
Key fields
| Field | Description |
|---|---|
| Name | The zone's domain name (e.g. example.com) |
| Provider | The provider this zone was discovered from |
| Status | Sync status: active, pending, error, or syncing |
| Record Count | Total number of DNS records in this zone |
| Issue Count | Number of open security issues across all records in the zone |
| Missing SPF | Flag indicating the zone has MX records but no SPF record |
| Multilocked | CSC-specific flag — zone changes require a phone call to CSC to unlock |
| Last Sync | Timestamp of the most recent record sync |
| Error Message | Details when the sync fails |
Email security posture
DNS Watchdog checks each zone with MX records for the presence of email authentication records:
- SPF — Sender Policy Framework, defines which servers can send email for the domain
- DKIM — DomainKeys Identified Mail, allows recipients to verify message integrity
- DMARC — Domain-based Message Authentication, Reporting and Conformance, enforces email authentication policy
Zones missing any of these records will have issues raised automatically.
Associated issues
| Issue | Severity | Description |
|---|---|---|
| Missing SPF Record | Warning | Zone has MX records but no SPF record — any server can send email on behalf of this domain |
| Missing DKIM Record | Warning | Zone has MX records but no DKIM record — recipients cannot verify message integrity |
| Missing DMARC Record | Warning | Zone has MX records but no DMARC record — no email authentication policy enforcement |
Actions
- Sync Records — trigger a manual re-sync of all records in the zone
- Delete Zone — remove the zone from DNS Watchdog (does not affect the DNS provider)
- Add SPF Record — quick action to add a basic SPF record if one is missing
Providers
View and manage your connected DNS providers — see connection status, zone counts, sync history, and credential health for Route 53, Cloudflare, CSC, Azure DNS, Google Cloud DNS, and UltraDNS.
Records
View and manage all DNS records synced from your providers — filter by type, zone, or status, review scan results, archive stale records, and investigate security issues.