The DNS Monitor is built into Clarion. There is no vendor to connect and no credential to store: you name the domains to watch, and Clarion resolves them on a schedule, comparing each result against the last.
Estimated time: 2 minutes. You need only the domains you want monitored.
Connect
- In Clarion, open Integrations and find DNS Monitor.
- Click Connect — the integration activates immediately.
- Add a monitor per domain you want watched.
What it detects
Each check compares the current answer against the previous one and raises an issue on a meaningful difference:
- Record changes — A, AAAA, CNAME, MX, NS, and TXT records that changed unexpectedly
- Email-authentication changes — SPF, DKIM, and DMARC records, the ones that gate whether someone can spoof your domain
- New subdomains — names that appeared since the last scan
- Nameserver and registrar changes — the signature of a domain hijack
- Certificate and TLS posture on the resolved hosts
These feed the DNS & Domain Security agent, which carries seven skills covering record change, subdomain change, email-auth change, new subdomain discovery, registrar compromise, DNS tunneling, and DDoS amplification.
What agents can do
The DNS tools are available to every agent, whether or not the monitor is watching a given name:
Acting on findings
The DNS Monitor detects; it does not change records. To let an agent fix a DNS problem, connect Cloudflare — that integration carries the record write and zone rollback tools, and the Dangling Subdomain Agent uses it for its daily sweep.
Disconnect
Click Disconnect on the integration page. Monitors under it stop running. 
