DNS Change Rollback
Rollback turns a recorded DNS change back into a draft changeset that reverses it. You review the proposed reverse, run validation, and apply it like any other changeset — never as an unreviewed direct write to your DNS provider.
Rolling back an applied changeset
Open any changeset in the Applied, Verified, or Propagated state and click Rollback. ZoneWatcher inverts every item:
- A record create in the original becomes a delete in the rollback.
- A record delete becomes a re-create using the original record's before-state.
- A record update flips its before- and after-state.
The rollback is created as a Draft changeset on the same zone with you as the creator, then immediately opened so you can review the diff. Submit, approve, and apply it through the normal change management workflow. Rollbacks pick up an AI risk score and follow the same approval rules as any other changeset.
Reverting a single check
Sometimes a change wasn't made through ZoneWatcher — somebody edited the zone directly at the provider, or a CI job pushed a record that shouldn't have shipped. ZoneWatcher's check history captures every change it observes, and modified checks expose a Revert Change action that drafts a changeset returning the zone to its state immediately before that check ran.
Open the zone, switch to the Checks tab, click into a check whose status is Modified, and choose Revert Change. The action is hidden if the check is the very first check on the zone, or if no prior check exists, since there is no earlier state to return to.
Limits
- You cannot roll back a rollback. The button is hidden on changesets created by a previous rollback to keep the audit trail clear.
- Rollback drafts always require approval and application before they take effect — ZoneWatcher never reverses a change without a deliberate human step.
- If the records being reverted have been deleted at the provider since the original change, the rollback's dry-run validation will surface the missing records before submission so you can adjust the draft.
Plan availability
DNS Change Rollback is included on the Control plan. The Rollback and Revert Change actions are hidden for teams on Monitor or Protect, and any stale link to a rollback-created changeset redirects back to the Changesets upgrade prompt. See Volume Discounts for Control pricing.