Marketplace - Cloudflare DNS Manager Agent

The Cloudflare DNS Manager looks after the part of your infrastructure no one checks until it breaks. It audits the records that decide whether your email reaches the inbox and whether your domain can be spoofed, flags every gap in order of risk, and makes the fixes for you, only ever on your approval.

It checks SPF, DKIM, DMARC and MX for email deliverability, and DNSSEC, CAA, exposed origin IPs and stale records for domain security. Every finding is ranked Critical to Low so you fix the dangerous things first. Add or correct any record from one conversation in Boomi. No Cloudflare expertise needed, and nothing changes without your confirmation.

Features:

• Audits SPF, DKIM, DMARC and MX records and explains in plain English what's present, what's missing, and what's configured too loosely, so you know exactly why your email is or isn't reaching the inbox.
• Flags DMARC policies set to monitor-only (p=none) that log suspicious activity but don't block it, and tells you what to change to enforce protection.
• Checks DNSSEC status to confirm your domain is protected against cache poisoning and hijacking, and explains the risk clearly if it isn't enabled.
• Verifies CAA records to ensure only the certificate authorities you trust can issue SSL certificates for your domain, and adds them if they're missing.
• Detects A and AAAA records exposing your real origin IP through Cloudflare, which widens your attack surface and undermines the protection proxying is meant to provide.
• Surfaces stale and forgotten DNS records that create subdomain-takeover risk, so you can review and clean up your estate safely.
• Ranks every finding by severity, from Critical to Low, so you know exactly where to focus and can work through gaps in the right order.
• Adds new records including full CAA support for issue, issuewild and iodef tags, drafts the exact entry, and creates it only once you confirm.
• Updates and tightens existing records, such as hardening an over-permissive SPF policy or correcting a TTL, through a short conversation rather than a manual edit.
• Approval-gated throughout. The agent reads and recommends freely, but nothing is added or modified without your explicit confirmation, and it can never delete a record.

​Solution Overview​

Verified Partner/Vendor Supported: This accelerator is fully supported and managed by the Partner/Vendor. For any support related inquiries or assistance including troubleshooting, guidance and/or updates to the solution, please contact the Partner/Vendor directly.