DNS-Editor Enterprise
The complete CE core plus the features for professional operation — audit, restore, security scan and SSO. One binary, unlocked by a signed license.
What EE adds
Section titled “What EE adds”| Feature | In short | Example |
|---|---|---|
| Audit history | Complete change history per zone | ”Who changed the MX on Tuesday?” |
| Time-travel restore | Roll a zone back to an earlier state | ”Back to the state before the deployment” |
| Security scan | Check zones against best practices | ”Where is DMARC missing? Where is a wildcard lurking?” |
| Single sign-on | Sign in through your own OIDC provider | Keycloak, Entra ID, Authentik |
Everything from the Community Edition remains included unchanged: multi-provider management, Sync Groups, templates, sources, DynDNS, ACME certificates, drift detection, inventory, provider migration, users/teams/projects including per-zone permissions and two-factor login.
Why a separate binary
Section titled “Why a separate binary”CE and EE are separate codebases split along the license boundary: EE imports the CE core and hooks in through its registration layer. In the CE build the EE code simply does not exist — there are no disabled features that could be unlocked.
Getting started
Section titled “Getting started”- License — generate and verify the license file
- Getting up and running — startup, configuration, migrating from CE
- Single sign-on — set up OIDC