Registration, certificates, mail authentication, subdomains and the scripts on your pages — found in about ten seconds, then watched and compared so you can see what moved. One domain or a thousand, with nothing to configure.
Results in about ten seconds. Monitoring from $15 a month, or see a live record.
Six things that fail without telling you. All of them are checked on a schedule from the day you start, and none of them need setting up.
Registrar, renewal date and transfer status. A lapsed domain takes your website and your email down together.
Expiry, issuer and the names it covers. When it lapses, browsers warn visitors away from your site.
SPF, DKIM and DMARC. When these break, mail stops arriving and the silence looks like nobody is interested.
Everything still resolving, including staging sites you forgot and records pointing at services that no longer exist.
Where the site actually lives, which third-party scripts are embedded, and what changed on the pages that matter.
One email confirming where things stand. Anything urgent reaches you the moment it is found, on every plan.
Portfolio plans from $49.
The free check
No counting and hiding, no three problems found and a paywall. Every finding comes with a plain explanation and instructions for fixing it, and those are free too. What you pay for is depth and continuity, never a warning.
Holdings
Needs attention
A record that starts empty is a promise. We read what is already public, so day one arrives with lineage rather than a counter at zero and a wait.
Certificate transparency logs are public and complete. We read them at signup, so you get the full lineage back to 2019 or earlier, with every issuer change dated.
Registration date, registrar history and current status, straight from the registry. Held for nine years is a fact you can state on your first afternoon.
Every subdomain resolving, every third-party script loading, every DNS record, your certificate authority policy and your mail posture. Written down, most of it for the first time.
Your record says one day on day one.
The limit of any check
That is the position today. Nothing above shows what was true last year, and nothing can be reconstructed later.
Every checker tells you where things stand right now and then forgets you were there. The questions that come up later are different ones. When did this change. What was it before. How long has any of it actually been watched.
One domain is the only input. Everything after that happens without you, and arrives as an email.
One domain builds the inventory. Registrar and renewal date, certificate and coverage, mail provider and authentication, hosting, embedded services, and every subdomain still resolving.
Checks continue on a schedule with no further input. A weekly email confirms the position. Anything urgent, such as an approaching expiry or broken mail authentication, reaches you immediately.
Every check is timestamped and sealed so it cannot be revised later. You can see the position on any past date, along with the values that came before each change.
The published record
Issued the day you start. It answers client questions, insurance enquiries and vendor reviews without anyone assembling paperwork, and it states plainly how long the position has held without a break.
This is an illustration of what a record looks like after three years, not a customer. Nothing here can be backdated, which is the whole point — so our own record shows the real number, counting from the day we started.
How this is different
Checking a domain is a commodity. MxToolbox, EasyDMARC and several others do it free, and your registrar already sends renewal notices. That part is well covered and we are not claiming to do it better.
What none of them keep is the history. When was the host changed. What was the value before someone edited it. How long has this been watched. Those questions come up during audits, handovers, insurance claims and sales, and a record that was never running cannot answer them.
Every check here is timestamped and sealed. After a year you can produce any date. After three years, continuity itself is the evidence, and that is the one thing no competitor can hand a new customer no matter what they build.
Two situations, one service
The domain lapses and the site goes dark. The certificate expires and browsers turn visitors away. Email stops arriving and you assume people are not replying. None of it announces itself, so the first you hear is usually from a customer.
Certificates issued by someone who left. Domains on a personal card. Mail authentication broken by a DNS change nobody wrote down. The record shows what changed and when, which otherwise takes days to piece together.
The record is worth more the longer it runs, and there is no way to get back a month you did not keep.
Questions
No. You type your domain and that is the whole setup. There is no DNS record to add, no code to install, no account to connect and no password to hand over. Everything we read is public information about the domain, of the kind anyone can look up.
They do, and if that email reaches the right person you are covered on that one item. The problems are that the notice goes to whoever registered the domain, which is often somebody who has left, and that it covers only the registration. Your certificate, your mail records and your subdomains are not on anybody's reminder list. Beyond that, a notice is not a record. It tells you what to do this month, not what was true two years ago.
The check itself is much the same, which is why we give ours away too. The difference is that a checker forgets you the moment you close the tab. Run it again next year and it starts from nothing. We keep every check, dated and sealed, so the history exists when somebody asks for it.
Once a week, most weeks saying nothing broke. Urgent items arrive immediately and separately, and in a normal year there are only a handful of those. If you are hearing from us often, something is genuinely wrong.
They are written for somebody who does not know the terminology. An alert says your email can currently be impersonated rather than quoting a policy string, and every finding links to instructions written the same way, with the technical detail below for whoever needs it. Plenty of customers forward the email to whoever built their site and that works fine.
It stops where your payment stops, and the published page shows the gap rather than hiding it. That is what makes continuous verification mean anything. You can export everything before you go, and it stays readable for thirty days at no charge.
The check is free and unlimited without an account, so you can see exactly what we find on your domain before deciding anything. There is no free monitoring tier, because watching something for free and then stopping would leave a gap in the one thing that is supposed to be continuous.
It is the most common way it gets used. Portfolio plans put every client domain in one list sorted by what is due, send one weekly email across all of them, and give each client their own published record you can hand over during onboarding.
From the blog
The renewal notice goes to an inbox nobody reads and the card on file expired two years ago. What happens in the thirty days after, and the point at which recovery stops being a money problem.
Read the postMail failing is the only outage that produces no error message on your side. Quotes go unanswered and invoices go unpaid, and it reads as customers losing interest rather than a fault.
Read the postA subdomain still pointing at a service you cancelled is not just untidy. With several providers, whoever claims that name next controls what is served from your address.
Read the post