Domains & DNS

Domains, DNS & Email Security

Domains and DNS are the quietest single point of failure in most businesses. We consolidate the portfolio, lock it down, and make email authentication something you can prove rather than hope for.

Technician working in a data centre aisle lined with illuminated server racks and structured cabling
Domains, DNS & Email Security delivered by our own engineers across Brisbane, Sydney, Wellington, the UK and San Francisco.

Consolidate and secure the portfolio

Scattered registrars, expired credit cards and unknown owners cause avoidable outages. We inventory every domain, transfer them into one managed account, enable registrar locks and set auto-renewal with alerting.

Resilient managed DNS

Anycast DNS with sensible TTLs, change control and versioned records. Every change is reviewed, so a single typo cannot take down your website, mail flow and phone system at once.

Email authentication and deliverability

SPF, DKIM and DMARC implemented in stages from monitoring to enforcement, with reporting so you can see who is sending as your domain and shut down spoofing.

Brand and defensive registrations

We advise on the variants worth holding, handle .au eligibility, and manage renewals for trading names and campaign domains across the group.

What you get

  • One managed domain portfolio
  • DMARC enforcement with reporting
  • Registrar locks and renewal alerts
  • Change-controlled DNS
Request a domains & dns quoteMeet My Australian Domains

Delivered by our brands

The teams behind domains, dns & email security

Domains, DNS and email authentication are handled by our registrar and wholesale brands, with security oversight from the group.

In detail

Exactly what domains & dns looks like when we deliver it

Deliverables

  • Domain portfolio consolidation with registrar lock and expiry alerting
  • Authoritative DNS migration with a documented record set
  • SPF, DKIM and staged DMARC rollout from monitoring to enforcement
  • DNSSEC and CAA records published where the registry supports them
  • Email security gateway, quarantine policy and user reporting workflow
  • Change-controlled DNS with an audit trail for every edit

How the engagement runs

  1. Week 1Portfolio audit, record inventory and spoofing exposure report.
  2. Week 2DNS migration, DNSSEC, CAA and registrar lock applied.
  3. Week 3-6DMARC from p=none to quarantine to reject with sender alignment.
  4. OngoingExpiry monitoring, DMARC report review and change control.

What we measure

Target DMARC policy
p=reject
Expiry alerting
90 / 30 / 7 days
DNS propagation
Under 5 minutes

Platforms we use

  • Cloudflare DNS
  • Microsoft 365 / Exchange Online
  • DMARC reporting
  • Registrar APIs
  • Email security gateway

Not included

  • Domain registration and renewal fees, charged at cost
  • Third-party platform changes that only your vendor can make

We list exclusions up front so a proposal never arrives with surprises attached.

Commitments

What every engagement includes as standard

Response targets
P1 within 15 minutes, P2 within 1 business hour, P3 within 1 business day — measured and reported, not aspirational.
Reporting
A monthly service report covering tickets, uptime, patch state, backups and open risks, plus a quarterly strategy review.
Data residency
Australian workloads stay in Australian regions by default; UK, US and NZ clients are hosted in-region on request.
No lock-in
You own your domains, DNS, cloud tenancies and documentation. Exit assistance is written into every agreement.

Domains & DNS questions, answered

  • Can you consolidate domains spread across several registrars?

    Yes. We inventory every domain, recover access where credentials are lost, transfer them into one managed account, then enable registrar locks, auto-renewal and expiry alerting.

  • What is DMARC and do we need it?

    DMARC tells receiving mail servers what to do with messages that fail authentication. Without it, anyone can spoof your domain. We roll it out from monitoring to enforcement so legitimate mail is never blocked.

  • Do you handle .au eligibility requirements?

    Yes. We check ABN and trading-name eligibility, register on your behalf and keep the records in your name — never locked to us.

  • Who owns our domains?

    You do, always. Registrant details stay in your business name and we hand over access on request without penalty.

Ready to talk domains & dns?

Tell us what you are trying to fix or grow. You will speak with an engineer, not a salesperson, and leave the call with a clear view of scope, timeline and cost.