DNS Tool for Azure — DNS Monitoring & Health Validation

DNS misconfigurations are silent. A dangling CNAME, a missing SPF record, an orphaned private zone — none of these trigger alerts in Azure. You find out when email stops delivering, a subdomain gets hijacked, or an internal service quietly breaks.

DNS Tool for Azure fixes this by continuously scanning your Azure DNS infrastructure, validating every zone and record against 42 built-in rules, and notifying your team the moment something needs attention.

It connects to your Azure environment with read-only access, discovers every public and private DNS zone across all your subscriptions, and runs health checks automatically — on a schedule that matches your plan, from daily to every 15 minutes.

No agents. No infrastructure to manage. Subscribe via Microsoft Marketplace, grant read-only consent once, and your DNS estate is mapped within minutes.

Why DNS Tool for Azure?

• Stop finding DNS problems from user complaints. DNS Tool checks for dangling CNAMEs, broken delegations, missing email security records, orphaned private zones, and 38 other known misconfiguration patterns — continuously and automatically.
• Replace manual DNS audits. Instead of periodic spreadsheet-based reviews that go stale immediately, DNS Tool maintains a live inventory of every zone and record, with full change history.
• Cover email security blind spots. 18 dedicated email security rules check SPF, DMARC, DKIM, MTA-STS, and TLS-RPT across all your domains. Missing or misconfigured email authentication records are flagged immediately.
• Monitor certificates and domains. Certificate Transparency log monitoring detects newly issued certificates for your domains. RDAP-based domain monitoring alerts you before domain registrations expire.
• Alert the right people, the right way. Route notifications to Microsoft Teams channels, Slack, Email, or Webhooks. Define alert rules that match your operational model. Suppress noise during planned maintenance windows.

Use Cases

"We manage 50+ Azure DNS zones across three subscriptions and have no idea if any records are stale."
DNS Tool discovers all zones automatically and flags orphaned records, dangling CNAMEs, and empty zones — no manual inventory needed.

"Our security team wants proof that SPF, DMARC, and DKIM are correctly configured across all our domains."
18 email security validation rules run against every zone on every scan. Export findings as CSV or JSON for compliance evidence.

"Someone changed a DNS record last week and it broke email delivery. We don't know who or when."
Every DNS change is tracked with before/after values. Alert rules notify your team in real time via Teams or Slack.

"We have private DNS zones for private endpoints, and we suspect some are orphaned after resource cleanup."
DNS Tool checks private zones against actual private endpoints and VNet links in your environment, flagging orphaned zones and missing PE records.

"A certificate expired on a production domain and nobody noticed."
Certificate Transparency log monitoring detects certificates issued for your domains. Expiry alerts fire before certificates lapse.

How It Works

1. Subscribe via Microsoft Marketplace — choose a plan that fits your environment
2. Sign in with your Microsoft Entra ID (formerly Azure AD) account
3. Connect your Azure tenant — a guided setup wizard walks you through granting read-only consent (no credentials shared, Reader role only)
4. First scan runs automatically — zones, records, and health findings appear within minutes
5. Configure alerts — route notifications to Teams, Slack, Email, or Webhooks based on rules you define

Ecosystem and Hosting