Registration, certificates, mail authentication and subdomains — found in about ten seconds, then checked every day. Every result is dated and sealed, so you can show what was true on any past day, not just today.
Results in about ten seconds. Monitoring from $15 a month, or see a live record.
Six things that fail without telling you. All of them are checked on a schedule from the day you start, and none of them need setting up.
Registration · registrar, renewal date, transfer lock
It takes your website and your email down together, and the notice went to whoever registered it years ago.
TLS certificate · expiry, issuer, names covered
A lapsed certificate puts a full-page security warning in front of every visitor before they reach your site.
Mail records · SPF, DKIM and DMARC
There is no error on your side. Quotes and invoices go unanswered, and it reads as customers losing interest.
Subdomains · everything still resolving
Staging sites you forgot, and records still pointing at services you cancelled, which somebody else can claim.
Hosting and pages · where the site lives, what it loads
Third-party scripts update themselves, and the page your customers pay on is not the page you last checked.
One weekly email · urgent items immediately
Most weeks it says nothing broke. Anything urgent reaches you the moment it is found, on every plan.
Portfolio plans from $49.
The free check
No counting and hiding, no three problems found and a paywall. Every finding comes with a plain explanation and instructions for fixing it, and those are free too. What you pay for is depth and continuity, never a warning.
Holdings
Needs attention
A record that starts empty is a promise. We read what is already public, so day one arrives with lineage rather than a counter at zero and a wait.
Certificate transparency logs are public and complete. We read them at signup, so you get the full lineage back to 2019 or earlier, with every issuer change dated.
Registration date, registrar history and current status, straight from the registry. Held for nine years is a fact you can state on your first afternoon.
Every subdomain resolving, every third-party script loading, every DNS record, your certificate authority policy and your mail posture. Written down, most of it for the first time.
Your record says one day on day one.
The limit of any check
A check reads what is public right now, which is why we give ours away. What it cannot tell you is what a record said last week, when the host changed, or how long any of this has held without a break — because none of that can be worked out later. It has to have been kept at the time.
The published record
Issued the day you start. It answers client questions, insurance enquiries and vendor reviews without anyone assembling paperwork, and it states plainly how long the position has held without a break.
This is an illustration of what a record looks like after three years, not a customer. Nothing here can be backdated, which is the whole point — so our own record shows the real number, counting from the day we started.
One domain is the only input. Everything after that happens without you, and arrives as an email.
One domain builds the inventory. Registrar and renewal date, certificate and coverage, mail provider and authentication, hosting, embedded services, and every subdomain still resolving.
Checks continue on a schedule with no further input. A weekly email confirms the position. Anything urgent, such as an approaching expiry or broken mail authentication, reaches you immediately.
Every check is timestamped and sealed so it cannot be revised later. You can see the position on any past date, along with the values that came before each change.
How this is different
Checking a domain is a commodity. MxToolbox, EasyDMARC and several others do it free, and your registrar already sends renewal notices. That part is well covered and we are not claiming to do it better.
| Free checkers | Registrar notices | DomainLedger | |
|---|---|---|---|
| Tells you what is wrong today | Yes | Registration only | Yes, free and in full |
| Watches it without being asked | No, you run it | Yes, near the renewal | Every day |
| Covers certificates, mail and subdomains | One tool each | No | All of it, one place |
| Keeps what it saw last year | No | No | Every check, dated |
| Can show the position on a past date | No | No | Any day since you started |
| Produces something you can hand over | A screenshot | An email | A sealed record, on one link |
The last three rows are the whole product. Those questions come up during audits, handovers, insurance claims and sales, and a record that was never running cannot answer them — which is why continuity is the one thing no competitor can hand a new customer, no matter what they build.
Who gets the most out of it
Anyone with a domain can use this, and plenty do. But the people who get the most from it have something in common: at some point, somebody other than them asks what happened and when.
Client domains · one list, one weekly email
Domains you did not register, on registrars you did not choose, for clients who will eventually ask what you have been doing. Each one gets its own record you can hand over at the end.
Insurers · procurement · vendor review · due diligence
The question is never "is it fine now", it is "how long has it been fine, and can you show me". A record that was not running when they ask cannot be made to have been.
Sales · handovers · someone leaving
The person who set it up has gone and nobody wrote any of it down. The record is the written-down version, kept from the day you started rather than assembled from memory afterwards.
The record is worth more the longer it runs, and there is no way to get back a month you did not keep.
Questions
No. You type your domain and that is the whole setup. There is no DNS record to add, no code to install, no account to connect and no password to hand over. Everything we read is public information about the domain, of the kind anyone can look up.
They do, and on that one item you are covered — if the email reaches the right person. It goes to whoever registered the domain, who has often left. And it covers the registration only: your certificate, your mail records and your subdomains are on nobody's reminder list. A notice also tells you what to do this month, not what was true two years ago.
The check itself is much the same, which is why we give ours away too. The difference is that a checker forgets you when you close the tab. We keep every check, dated and sealed, so the history exists when somebody asks for it.
Once a week, most weeks saying nothing broke. Urgent items arrive immediately and separately, and in a normal year there are only a handful of those. If you are hearing from us often, something is genuinely wrong.
They are written for somebody who does not know the terminology. An alert says your email can currently be impersonated rather than quoting a policy string, and every finding links to instructions written the same way, with the technical detail underneath. Forwarding one to whoever built your site also works fine.
It stops where your payment stops, and the published page shows the gap rather than hiding it. That is what makes continuous verification mean anything. You can export everything before you go, and it stays readable for thirty days at no charge.
The check is free and unlimited without an account, so you can see exactly what we find on your domain before deciding anything. There is no free monitoring tier, because watching something for free and then stopping would leave a gap in the one thing that is supposed to be continuous.
It is the most common way it gets used. Portfolio plans put every client domain in one list sorted by what is due, send one weekly email across all of them, and give each client their own published record you can hand over during onboarding.
From the blog
The renewal notice goes to an inbox nobody reads and the card on file expired two years ago. What happens in the thirty days after, and the point at which recovery stops being a money problem.
Read the postMail failing is the only outage that produces no error message on your side. Quotes go unanswered and invoices go unpaid, and it reads as customers losing interest rather than a fault.
Read the postA subdomain still pointing at a service you cancelled is not just untidy. With several providers, whoever claims that name next controls what is served from your address.
Read the post