The platform
Every client's DNS, under one process.
What does the DNSMentor platform do?
DNSMentor is a DNS management platform for MSPs. It connects 26 DNS providers into one interface, validates every change against 56 rules before it is applied, routes changes for approval, verifies the result in public DNS, keeps a tamper-evident audit trail, and trains engineers as they work. It manages the DNS you already have rather than replacing it.
One pane of glass for every client domain
Your clients arrive with whatever DNS their last provider chose. DNSMentor connects 26 of them and puts every zone in one place.
Cross-provider estate
Every zone from all 26 supported providers in one searchable list, grouped by the client who pays for it.
Zone discovery
Point DNSMentor at a provider account and it finds every zone in it — including the ones nobody documented.
Import from anywhere
Bring an estate in from zone files, CSVs, PDFs and screenshots when the outgoing provider will not co-operate.
Estate health
Every domain scored against delegation, mail authentication, TTL sanity and open incidents. Worst first.
Misplaced-record repair
Finds records sitting at the wrong name — the ones that resolve for nobody and look correct in every tool.
Client portfolios
Group domains by client, report per client, and hand a client their own evidence without exposing anyone else.
Change control DNS has never had
Every other risky change in an MSP has a process. DNSMentor gives DNS one: 56 checks, an approval step, and proof it went live.
Pre-flight validation
56 rules run against the zone as it would exist after the change, not just the record being typed.
Simulation
See the resulting zone before anything is written — including records you did not touch that stop resolving because of ones you did.
Approval workflow
A second pair of eyes where policy requires it, configurable per organisation and per engineer.
Independent verification
After apply, the record is queried from outside the platform. Applied and live stay separate claims.
Rollback
Any applied change can be reversed from the record of what it changed.
Templates
Microsoft 365, Google Workspace and the other jobs you do weekly, as one reviewed action instead of nine records.
Tamper-evident audit
Hash-chained entries; altering one breaks the chain and verification names the row.
Ticket write-ups
A customer-readable note generated from the audit record, ready to paste into the ticket.
A team that gets better at DNS
15 modules and a 19-article reference, inside the tool, at the moment somebody gets it wrong.
Skill gating
What an engineer may apply unsupervised depends on what they have demonstrated, not on their job title.
Coaching from rejections
A blocked change explains the rule, why it exists, and what the failure looks like in the wild.
Learning paths
Assign a curriculum by role, and see who has finished it.
Compliance reporting
Evidence of who was trained on what and when, for ISO 27001 and Cyber Essentials.
Knowledge base
19 reference articles linked directly from the checks that raise them.
Points and leaderboard
Optional, and off by default for teams who would rather not.
Running it day to day
Monitoring, alerting and the integrations that stop DNSMentor being another tab nobody opens.
Uptime and record monitoring
Watch the records that matter and know when one stops resolving.
Incident tracking
An incident opens against the domain, not a generic alert queue.
Alert destinations
Route notifications where your team already looks.
PSA integration
Link changes to tickets so the audit trail and the customer record agree.
Microsoft Entra ID SSO
Your directory, your conditional access, your offboarding.
IP allow-listing
Restrict access to your own networks, per organisation.
White-label branding
Your colours and logo, so a client-facing report looks like yours.
Branded nameservers
Vanity nameservers on your own domain.
The 26 providers DNSMentor manages
Whatever your clients came with. Each one connects with its own API credential and appears in the same estate view as all the others.
- 20i
- Akamai Edge DNS
- AWS Route 53
- Azure DNS
- Bunny.net
- Cloudflare
- ClouDNS
- Constellix
- deSEC
- DigitalOcean
- DNS Made Easy
- DNSimple
- easyDNS
- Gandi LiveDNS
- GoDaddy
- Google Cloud DNS
- Hetzner
- IONOS
- Linode
- Namecheap
- Netlify DNS
- NS1
- OVHcloud
- Porkbun
- PowerDNS
- Vultr
26 providers, one deliberate exception. Hurricane Electric publishes no usable API, so DNSMentor will not pretend to manage it — scraping a control panel to move customer zones is not something this product will do. What that means for you →
Platform questions
Does DNSMentor replace my DNS provider?
No. DNSMentor manages the DNS you already have. Your zones stay hosted with Cloudflare, Route 53, GoDaddy or whoever holds them today, and DNSMentor talks to each provider through its own API. Nothing about your resolution path changes, and if you stop using DNSMentor your zones carry on exactly as they are.
Do I need to migrate zones to use DNSMentor?
No migration is required. You add an API credential for each provider you already use, DNSMentor imports the zones and records it finds, and you manage them from one screen. Zones remain authoritative wherever they are now.
How does DNSMentor handle multi-tenancy for MSPs?
DNSMentor is built for one MSP managing many client businesses. Domains are grouped into client portfolios, reporting and evidence export run per client, and access, approval policy and audit are scoped so one client's data is never visible in another's context.
What happens if a DNS provider rejects a change?
DNSMentor surfaces the provider's own error text rather than a generic failure, records the attempt in the audit trail, and leaves the change in a state you can correct and resubmit. The zone is re-read immediately before every write, so a change somebody made in the provider portal while yours sat in approval is never silently overwritten.
Bring the change you are dreading.
Thirty minutes, your estate, your worst zone. If the checks find nothing you did not already know, we have wasted half an hour of your time and none of your money.
No card. No trial clock. UK-hosted, and we will tell you which providers we have actually proven before you ask.
Last updated