DNS Made Easy
Configure the DNS Made Easy integration with RAD Security to ingest managed domains and DNS records.
This guide walks you through integrating DNS Made Easy with RAD Security to ingest your managed domains/zones and DNS records, including GTD/failover configuration, for external attack-surface analysis.
DNS Made Easy provides managed authoritative DNS. RAD Security connects to the DNS Made Easy API and pulls your zones and records on a scheduled basis. DNS Made Easy is DNS-only — it does not handle domain registration or TLS issuance. It complements CSC Global, which covers registration and TLS.
Read-only integration: RAD Security only reads data from DNS Made Easy. It never creates, modifies, or deletes domains or DNS records in your account.
Prerequisites
Before you begin, ensure you have:
- A DNS Made Easy account on a Business plan or higher (required for API access)
- Ability to generate an API Key and Secret Key in the Control Panel
- Access to a RAD Security workspace with integration permissions
Business plan required: DNS Made Easy's API requires a Business plan or higher. If your account is on a lower tier, API calls are rejected and the integration cannot connect.
Understanding Integration Components
Step 1: Generate API Keys in DNS Made Easy
Sign in to the Control Panel
Log in to the DNS Made Easy Control Panel. For sandbox keys, use the sandbox control panel at sandbox.dnsmadeeasy.com.
Open Account Information
Navigate to Config → Account Information, where API access is managed.
Generate API Key and Secret Key
Generate your API Key and Secret Key.
Copy the Secret Key immediately and store it securely in a password manager or secrets vault. You will need both keys to configure the integration.
Exact Control Panel navigation and labels may vary. See the DNS Made Easy API documentation for the current steps to generate API keys.
Configure in RAD Security
Navigate to your RAD Security workspace and configure the DNS Made Easy integration with the following parameters:
Required Parameters
| Parameter | Description |
|---|---|
| API Key | DNS Made Easy API key |
| Secret Key | DNS Made Easy secret key |
Optional Parameters
| Parameter | Description |
|---|---|
| Sandbox | Use the DNS Made Easy sandbox API instead of production (boolean; default off) |
The integration authenticates with HMAC request signing, which depends on accurate time. This is handled by RAD Security automatically.
Verify Integration
Check Connection Status
- Navigate to Data Sources > Integrations > Domain Security in RAD Security
- Locate your DNS Made Easy integration
- Verify the connection status shows as Connected
Your DNS Made Easy integration is now configured! RAD Security will ingest your managed domains and DNS records on a scheduled basis.
What Data is Synced
DNS Made Easy is DNS-only — it does not cover domain registration or TLS issuance. Pair it with CSC Global for registration and TLS coverage.
Use Cases
Attack Surface Analysis Map your external footprint across managed zones and DNS records.
DNS Posture Hygiene Track nameservers, DNSSEC status, and record configuration across your zones.
Failover Visibility Surface GTD/failover configuration to understand traffic-steering and resilience setup.
Complementary DNS Coverage Combine operational DNS from DNS Made Easy with registration and TLS from CSC Global.
Troubleshooting
Security Best Practices
Use a Service Account Generate API keys under a dedicated account rather than a personal login.
Rotate Keys Regenerate the API Key and Secret Key periodically according to your security policy.
Secure Storage Store the Secret Key in a secrets vault. Never commit it to version control.
Use Sandbox for Testing Validate configuration against the sandbox before connecting production.
Additional Resources
DNS Made Easy API
Official DNS Made Easy API documentation
Domain Security Overview
Learn about RAD's domain security integrations