Features/DNS
DNS / Cloudflare
BYO Cloudflare token or Hosted Free zones — manage DNS records and custom WAF rules from the agency portal.
Pillar
Security
From
All plans
The problem
DNS and WAF live outside the care plan.
Agencies juggle registrar panels, client Cloudflare logins, and ad-hoc WAF rules with no audit trail. When a record breaks or nameservers drift, the retainer takes the blame — even though the tooling never lived in your portal.
How Site Armor handles it
BYO Cloudflare token
Connect a scoped API token for the client’s existing Cloudflare account. They keep ownership; you manage DNS and WAF from Site Armor.
Hosted Free zones
“Protect with Site Armor DNS” creates a Free Cloudflare zone on our account. Point nameservers at the registrar to activate.
DNS records in-portal
Create and edit A, AAAA, CNAME, TXT, and more — with proxied/orange-cloud controls where Cloudflare supports them.
Custom WAF rules
Up to five custom security rules on Free (plus Site Armor IP allowlisting) — managed from the same site tab as DNS.
Technical detail
What actually gets measured and acted on.
BYO token vaulted per site (never shown in client portal)
Hosted Free zone creation + nameserver handoff
DNS record CRUD with zone status (active / pending NS)
Custom WAF rules (≤5 on Cloudflare Free)
Disconnect removes the Site Armor link; Hosted zones are not auto-deleted
Owner/Admin only — hidden from client portal users
Available on all agency plans
Every claim on this page maps to a shipping capability. For plan limits (sites, AI tokens, storage, backups), see Pricing.
Depth levels
More access unlocks more capability.
URL only
Add a site by URL. External scanning starts immediately — performance, SEO, uptime, SSL, broken links, and public-surface security.
WordPress plugin
Install Site Armor to unlock plugin/theme inventory, file integrity, malware scans, WooCommerce metrics, backups, and safe updates.
SSH credentials
Vaulted SSH unlocks the autonomous AI agent — real file access, server-level fixes, hardening, and malware cleanup with backup-before-write.
Related features
Capabilities that work alongside this one.
FAQ
Frequently asked questions.
Built for developers and agency owners who've heard every WordPress tool pitch.
Use BYO when the client already runs Cloudflare and wants to keep their account. Use Hosted Free when you want Site Armor to provision a Free zone and you (or the client) will update nameservers at the registrar.
No. DNS / Cloudflare is Owner and Admin only so agency operators stay in control of zone changes.
Site Armor drops the connection and forgets the vaulted token (BYO). Hosted Free zones stay on Cloudflare until you remove them there — we don’t delete the zone on disconnect.
No. DNS / Cloudflare covers DNS records and custom WAF. Malware detection and hardening remain separate security pillars.
Start monitoring your sites in minutes.
Free tier. No credit card. URL-only setup in 30 seconds.
Free for 1 site · 14-day trial · No card required · Full white-label